./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ef17cfb4a2c8358ea255253edc0610051a64c94a86cd92ff89d3b074c51925f6 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 20:04:42,247 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 20:04:42,250 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 20:04:42,315 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 20:04:42,315 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 20:04:42,320 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 20:04:42,323 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 20:04:42,329 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 20:04:42,331 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 20:04:42,337 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 20:04:42,339 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 20:04:42,342 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 20:04:42,342 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 20:04:42,346 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 20:04:42,347 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 20:04:42,350 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 20:04:42,352 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 20:04:42,353 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 20:04:42,354 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 20:04:42,363 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 20:04:42,364 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 20:04:42,366 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 20:04:42,370 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 20:04:42,371 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 20:04:42,381 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 20:04:42,382 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 20:04:42,383 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 20:04:42,385 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 20:04:42,386 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 20:04:42,387 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 20:04:42,387 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 20:04:42,389 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 20:04:42,392 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 20:04:42,393 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 20:04:42,396 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 20:04:42,397 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 20:04:42,398 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 20:04:42,398 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 20:04:42,399 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 20:04:42,400 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 20:04:42,401 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 20:04:42,402 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-11-02 20:04:42,453 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 20:04:42,453 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 20:04:42,454 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 20:04:42,454 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 20:04:42,456 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 20:04:42,457 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 20:04:42,457 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 20:04:42,457 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-11-02 20:04:42,457 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-11-02 20:04:42,458 INFO L138 SettingsManager]: * Use old map elimination=false [2022-11-02 20:04:42,459 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-11-02 20:04:42,459 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-11-02 20:04:42,460 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-11-02 20:04:42,460 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 20:04:42,460 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 20:04:42,461 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-02 20:04:42,461 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 20:04:42,461 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 20:04:42,461 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 20:04:42,462 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-11-02 20:04:42,462 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-11-02 20:04:42,462 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-11-02 20:04:42,462 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 20:04:42,464 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 20:04:42,465 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-11-02 20:04:42,465 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 20:04:42,465 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-11-02 20:04:42,466 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 20:04:42,466 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 20:04:42,466 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 20:04:42,466 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 20:04:42,468 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-11-02 20:04:42,468 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef17cfb4a2c8358ea255253edc0610051a64c94a86cd92ff89d3b074c51925f6 [2022-11-02 20:04:42,794 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 20:04:42,819 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 20:04:42,822 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 20:04:42,824 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 20:04:42,825 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 20:04:42,826 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c [2022-11-02 20:04:42,913 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/data/2861e0c83/e23a24852d124d4eb3c0e6d9cb4c69cc/FLAG01a39ffec [2022-11-02 20:04:43,678 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 20:04:43,684 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c [2022-11-02 20:04:43,720 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/data/2861e0c83/e23a24852d124d4eb3c0e6d9cb4c69cc/FLAG01a39ffec [2022-11-02 20:04:43,828 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/data/2861e0c83/e23a24852d124d4eb3c0e6d9cb4c69cc [2022-11-02 20:04:43,830 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 20:04:43,832 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 20:04:43,834 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 20:04:43,834 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 20:04:43,838 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 20:04:43,839 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:04:43" (1/1) ... [2022-11-02 20:04:43,841 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1525d8d0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:43, skipping insertion in model container [2022-11-02 20:04:43,841 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:04:43" (1/1) ... [2022-11-02 20:04:43,853 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 20:04:43,938 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:04:44,186 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c[1811,1824] [2022-11-02 20:04:44,504 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:04:44,527 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 20:04:44,543 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c[1811,1824] [2022-11-02 20:04:44,666 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:04:44,696 INFO L208 MainTranslator]: Completed translation [2022-11-02 20:04:44,697 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44 WrapperNode [2022-11-02 20:04:44,699 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 20:04:44,701 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 20:04:44,701 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 20:04:44,701 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 20:04:44,711 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:44,750 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:45,331 INFO L138 Inliner]: procedures = 94, calls = 346, calls flagged for inlining = 199, calls inlined = 1005, statements flattened = 35272 [2022-11-02 20:04:45,332 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 20:04:45,333 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 20:04:45,333 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 20:04:45,333 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 20:04:45,344 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:45,345 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:45,479 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:45,480 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:45,999 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:46,289 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:46,327 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:46,379 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:46,547 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 20:04:46,563 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 20:04:46,563 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 20:04:46,564 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 20:04:46,565 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (1/1) ... [2022-11-02 20:04:46,578 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:04:46,636 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:04:46,655 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:04:46,660 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-11-02 20:04:46,700 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 20:04:46,700 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 20:04:46,700 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 20:04:46,701 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 20:04:46,905 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 20:04:46,907 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 20:05:03,454 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 20:05:03,528 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 20:05:03,528 INFO L300 CfgBuilder]: Removed 61 assume(true) statements. [2022-11-02 20:05:03,540 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:05:03 BoogieIcfgContainer [2022-11-02 20:05:03,541 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 20:05:03,542 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-11-02 20:05:03,543 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-11-02 20:05:03,548 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-11-02 20:05:03,549 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-02 20:05:03,549 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 02.11 08:04:43" (1/3) ... [2022-11-02 20:05:03,551 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@30b3ab48 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 08:05:03, skipping insertion in model container [2022-11-02 20:05:03,551 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-02 20:05:03,551 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:04:44" (2/3) ... [2022-11-02 20:05:03,552 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@30b3ab48 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 02.11 08:05:03, skipping insertion in model container [2022-11-02 20:05:03,552 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-02 20:05:03,552 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:05:03" (3/3) ... [2022-11-02 20:05:03,554 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product23.cil.c [2022-11-02 20:05:03,778 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-11-02 20:05:03,778 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-11-02 20:05:03,778 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-11-02 20:05:03,779 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-11-02 20:05:03,779 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-11-02 20:05:03,779 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-11-02 20:05:03,779 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-11-02 20:05:03,779 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-11-02 20:05:03,816 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9457 states, 9456 states have (on average 1.8765862944162437) internal successors, (17745), 9456 states have internal predecessors, (17745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:04,110 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2377 [2022-11-02 20:05:04,110 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:04,111 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:04,123 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:04,124 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:04,124 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-11-02 20:05:04,150 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9457 states, 9456 states have (on average 1.8765862944162437) internal successors, (17745), 9456 states have internal predecessors, (17745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:04,291 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2377 [2022-11-02 20:05:04,292 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:04,292 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:04,298 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:04,299 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:04,318 INFO L748 eck$LassoCheckResult]: Stem: 7623#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4623#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 4270#L2731true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7795#L2724true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 1805#L2739true main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 7883#L2329true assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 8020#L2303true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1632#L1917true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 8965#L1942true aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8860#L3097true assume 0 == initPersonOnFloor_~floor#1; 3736#L3098true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4799#L3205-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 7704#L2889true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 8535#L2901-2true assume { :end_inline_callOnFloor } true; 6284#L3241true assume { :end_inline_initPersonOnFloor } true; 6518#L2064true assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 6749#L1917-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 7683#L1942-1true angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5433#L3097-1true assume 0 == initPersonOnFloor_~floor#1; 3697#L3098-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2235#L3205-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2713#L2889-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4094#L2901-5true assume { :end_inline_callOnFloor } true; 2970#L3241-1true assume { :end_inline_initPersonOnFloor } true; 3885#L2075true assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 2560#L559true __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 8095#L90true assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 7492#L2826true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 598#L2853true isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 8151#L1860true stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 2367#L1244true assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5153#L507true stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7143#L1248true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 6699#L1261true timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 4567#L1397true assume !(0 != timeShift_~tmp___9~2#1); 4261#L1488true assume 1 == ~doorState~0;~doorState~0 := 0; 1832#L1488-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 7000#L2826-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 6598#L2853-3true isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 3065#L1860-1true stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 4948#L1099true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6926#L507-3true stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1087#L1112true timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 75#L1496true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1445#L1156true assume !(1 == ~currentHeading~0); 94#L1166true assume !(0 == ~currentFloorID~0); 2363#L1166-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9129#L1172-1true assume { :end_inline_continueInDirection } true; 7997#L1505-2true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1189#L108true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 3943#L109true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 810#L1700true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~2#1 := 0;existInLiftCallsInDirection_~i~2#1 := 1 + ~currentFloorID~0; 5983#L1704-2true [2022-11-02 20:05:04,326 INFO L750 eck$LassoCheckResult]: Loop: 5983#L1704-2true assume !false; 8944#L1705true assume existInLiftCallsInDirection_~i~2#1 < 5; 8076#L1706true assume !(0 == existInLiftCallsInDirection_~i~2#1); 537#L1719true assume !(1 == existInLiftCallsInDirection_~i~2#1); 9115#L1728true assume !(2 == existInLiftCallsInDirection_~i~2#1); 535#L1737true assume !(3 == existInLiftCallsInDirection_~i~2#1); 2781#L1746true assume !(4 == existInLiftCallsInDirection_~i~2#1); 8710#L1747-1true existInLiftCallsInDirection_~i~2#1 := 1 + existInLiftCallsInDirection_~i~2#1; 5983#L1704-2true [2022-11-02 20:05:04,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:04,334 INFO L85 PathProgramCache]: Analyzing trace with hash -377515284, now seen corresponding path program 1 times [2022-11-02 20:05:04,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:04,348 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1013424480] [2022-11-02 20:05:04,348 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:04,349 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:04,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:04,900 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:04,901 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:04,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1013424480] [2022-11-02 20:05:04,904 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1013424480] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:04,904 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:04,905 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:05:04,907 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1683102670] [2022-11-02 20:05:04,908 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:04,916 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:04,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:04,917 INFO L85 PathProgramCache]: Analyzing trace with hash 1111738493, now seen corresponding path program 1 times [2022-11-02 20:05:04,918 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:04,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2116942681] [2022-11-02 20:05:04,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:04,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:04,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:04,954 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:04,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:04,993 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:05,060 INFO L210 LassoAnalysis]: Preferences: [2022-11-02 20:05:05,061 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-02 20:05:05,061 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-02 20:05:05,062 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-02 20:05:05,062 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-11-02 20:05:05,062 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:05,062 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-02 20:05:05,063 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-02 20:05:05,063 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product23.cil.c_Iteration1_Loop [2022-11-02 20:05:05,063 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-02 20:05:05,063 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-02 20:05:05,091 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:05:05,203 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-02 20:05:05,218 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-11-02 20:05:05,221 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:05,221 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:05:05,253 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:05:05,302 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-11-02 20:05:05,303 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:05:05,304 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:05:05,394 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-11-02 20:05:05,394 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:05,395 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:05:05,397 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:05:05,405 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-11-02 20:05:05,405 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:05:05,420 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-11-02 20:05:05,532 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-11-02 20:05:05,543 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-11-02 20:05:05,543 INFO L210 LassoAnalysis]: Preferences: [2022-11-02 20:05:05,544 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-02 20:05:05,544 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-02 20:05:05,544 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-02 20:05:05,544 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-11-02 20:05:05,544 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:05,544 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-02 20:05:05,544 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-02 20:05:05,545 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product23.cil.c_Iteration1_Loop [2022-11-02 20:05:05,545 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-02 20:05:05,545 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-02 20:05:05,546 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:05:05,620 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-02 20:05:05,625 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-11-02 20:05:05,626 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:05,628 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:05:05,632 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:05:05,648 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:05:05,661 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-11-02 20:05:05,664 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:05:05,665 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:05:05,665 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:05:05,665 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:05:05,666 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:05:05,669 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:05:05,670 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:05:05,693 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-11-02 20:05:05,702 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-11-02 20:05:05,703 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-11-02 20:05:05,705 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:05,705 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:05:05,707 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:05:05,715 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-11-02 20:05:05,716 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-11-02 20:05:05,716 INFO L513 LassoAnalysis]: Proved termination. [2022-11-02 20:05:05,717 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~2#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~2#1 Supporting invariants [] [2022-11-02 20:05:05,741 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-11-02 20:05:05,761 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2022-11-02 20:05:05,764 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-11-02 20:05:05,795 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:05,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:05,962 INFO L263 TraceCheckSpWp]: Trace formula consists of 623 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-02 20:05:05,965 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:05:06,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:06,122 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-02 20:05:06,123 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:05:06,380 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:06,439 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2022-11-02 20:05:06,475 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 9457 states, 9456 states have (on average 1.8765862944162437) internal successors, (17745), 9456 states have internal predecessors, (17745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:08,038 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2022-11-02 20:05:14,200 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 9457 states, 9456 states have (on average 1.8765862944162437) internal successors, (17745), 9456 states have internal predecessors, (17745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 107651 states and 201837 transitions. Complement of second has 18 states. [2022-11-02 20:05:14,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2022-11-02 20:05:14,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:14,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 109799 transitions. [2022-11-02 20:05:14,401 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 109799 transitions. Stem has 52 letters. Loop has 8 letters. [2022-11-02 20:05:14,403 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:05:14,403 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 109799 transitions. Stem has 60 letters. Loop has 8 letters. [2022-11-02 20:05:14,405 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:05:14,405 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 109799 transitions. Stem has 52 letters. Loop has 16 letters. [2022-11-02 20:05:14,407 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:05:14,409 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 107651 states and 201837 transitions. [2022-11-02 20:05:15,599 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15168 [2022-11-02 20:05:16,293 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 107651 states to 58440 states and 109522 transitions. [2022-11-02 20:05:16,295 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58410 [2022-11-02 20:05:16,381 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58411 [2022-11-02 20:05:16,383 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58440 states and 109522 transitions. [2022-11-02 20:05:16,392 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:16,392 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58440 states and 109522 transitions. [2022-11-02 20:05:16,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58440 states and 109522 transitions. [2022-11-02 20:05:17,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58440 to 16991. [2022-11-02 20:05:17,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16991 states, 16991 states have (on average 1.8692837384497676) internal successors, (31761), 16990 states have internal predecessors, (31761), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:17,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16991 states to 16991 states and 31761 transitions. [2022-11-02 20:05:17,175 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16991 states and 31761 transitions. [2022-11-02 20:05:17,175 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:17,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:05:17,179 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:05:17,181 INFO L87 Difference]: Start difference. First operand 16991 states and 31761 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:17,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:17,963 INFO L93 Difference]: Finished difference Result 24550 states and 45741 transitions. [2022-11-02 20:05:17,963 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24550 states and 45741 transitions. [2022-11-02 20:05:18,092 INFO L131 ngComponentsAnalysis]: Automaton has 78 accepting balls. 8686 [2022-11-02 20:05:18,410 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24550 states to 24537 states and 45728 transitions. [2022-11-02 20:05:18,410 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24518 [2022-11-02 20:05:18,444 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24518 [2022-11-02 20:05:18,445 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24537 states and 45728 transitions. [2022-11-02 20:05:18,446 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:18,446 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24537 states and 45728 transitions. [2022-11-02 20:05:18,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24537 states and 45728 transitions. [2022-11-02 20:05:18,751 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24537 to 9454. [2022-11-02 20:05:18,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9454 states, 9454 states have (on average 1.863655595515126) internal successors, (17619), 9453 states have internal predecessors, (17619), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:18,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9454 states to 9454 states and 17619 transitions. [2022-11-02 20:05:18,805 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9454 states and 17619 transitions. [2022-11-02 20:05:18,806 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:05:18,807 INFO L428 stractBuchiCegarLoop]: Abstraction has 9454 states and 17619 transitions. [2022-11-02 20:05:18,807 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-11-02 20:05:18,807 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9454 states and 17619 transitions. [2022-11-02 20:05:18,859 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2377 [2022-11-02 20:05:18,859 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:18,859 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:18,860 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:18,861 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:18,861 INFO L748 eck$LassoCheckResult]: Stem: 168019#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 166206#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 165876#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 165877#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 162685#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 162686#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 168106#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 162379#L1917 assume !(0 == getOrigin_~person#1); 162380#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 160506#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 168297#L3097 assume 0 == initPersonOnFloor_~floor#1; 165350#L3098 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 160239#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 166368#L2889 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 161841#L2901-2 assume { :end_inline_callOnFloor } true; 167436#L3241 assume { :end_inline_initPersonOnFloor } true; 167437#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 167562#L1917-1 assume !(0 == getOrigin_~person#1); 164161#L1921-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 159686#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 166890#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 165301#L3098-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 159130#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 163376#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 164083#L2901-5 assume { :end_inline_callOnFloor } true; 164425#L3241-1 assume { :end_inline_initPersonOnFloor } true; 164426#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 163852#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 163853#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 167986#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 160360#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 160361#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 163578#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 163580#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 166693#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 165580#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 166150#L1397 assume !(0 != timeShift_~tmp___9~2#1); 165869#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 162727#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 162728#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 164733#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 164554#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 164555#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 166518#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 161377#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 159078#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 159079#L1156 assume !(1 == ~currentHeading~0); 159132#L1166 assume !(0 == ~currentFloorID~0); 159133#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 163572#L1172-1 assume { :end_inline_continueInDirection } true; 167219#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 161576#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 161578#L109 assume !(1 == ~prevDir~0); 165585#L135 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 165850#L1700-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~2#1 := 0;existInLiftCallsInDirection_~i~2#1 := 1 + ~currentFloorID~0; 161805#L1704-8 [2022-11-02 20:05:18,862 INFO L750 eck$LassoCheckResult]: Loop: 161805#L1704-8 assume !false; 161806#L1705-2 assume existInLiftCallsInDirection_~i~2#1 < 5; 162395#L1706-2 assume !(0 == existInLiftCallsInDirection_~i~2#1); 163540#L1719-2 assume !(1 == existInLiftCallsInDirection_~i~2#1); 163542#L1728-2 assume !(2 == existInLiftCallsInDirection_~i~2#1); 163997#L1737-2 assume !(3 == existInLiftCallsInDirection_~i~2#1); 166785#L1746-2 assume !(4 == existInLiftCallsInDirection_~i~2#1); 164897#L1747-5 existInLiftCallsInDirection_~i~2#1 := 1 + existInLiftCallsInDirection_~i~2#1; 161805#L1704-8 [2022-11-02 20:05:18,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:18,863 INFO L85 PathProgramCache]: Analyzing trace with hash 1707394713, now seen corresponding path program 1 times [2022-11-02 20:05:18,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:18,863 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1147462422] [2022-11-02 20:05:18,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:18,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:18,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:19,111 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:19,111 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:19,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1147462422] [2022-11-02 20:05:19,112 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1147462422] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:19,112 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:19,113 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:05:19,113 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1300420660] [2022-11-02 20:05:19,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:19,114 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:19,114 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:19,115 INFO L85 PathProgramCache]: Analyzing trace with hash -1105989763, now seen corresponding path program 1 times [2022-11-02 20:05:19,115 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:19,115 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [516728094] [2022-11-02 20:05:19,115 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:19,116 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:19,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:19,122 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:19,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:19,129 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:19,182 INFO L210 LassoAnalysis]: Preferences: [2022-11-02 20:05:19,182 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-02 20:05:19,182 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-02 20:05:19,183 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-02 20:05:19,183 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-11-02 20:05:19,183 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:19,183 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-02 20:05:19,183 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-02 20:05:19,184 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product23.cil.c_Iteration2_Loop [2022-11-02 20:05:19,184 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-02 20:05:19,184 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-02 20:05:19,185 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:05:19,258 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-02 20:05:19,259 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-11-02 20:05:19,259 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:19,259 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:05:19,261 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:05:19,267 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-02 20:05:19,267 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:05:19,283 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-11-02 20:05:19,337 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2022-11-02 20:05:19,337 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:19,337 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:05:19,339 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:05:19,352 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-11-02 20:05:19,353 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-02 20:05:19,353 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-11-02 20:05:19,423 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-11-02 20:05:19,438 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-11-02 20:05:19,438 INFO L210 LassoAnalysis]: Preferences: [2022-11-02 20:05:19,438 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-02 20:05:19,439 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-02 20:05:19,439 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-02 20:05:19,439 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-11-02 20:05:19,439 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:19,439 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-02 20:05:19,439 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-02 20:05:19,439 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product23.cil.c_Iteration2_Loop [2022-11-02 20:05:19,439 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-02 20:05:19,440 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-02 20:05:19,440 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-02 20:05:19,511 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-02 20:05:19,512 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-11-02 20:05:19,512 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:19,512 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:05:19,514 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:05:19,522 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-02 20:05:19,536 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-11-02 20:05:19,536 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-02 20:05:19,537 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-02 20:05:19,537 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-02 20:05:19,537 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-02 20:05:19,537 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-02 20:05:19,539 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-02 20:05:19,539 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-02 20:05:19,565 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-11-02 20:05:19,568 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2022-11-02 20:05:19,569 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2022-11-02 20:05:19,569 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-02 20:05:19,569 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:05:19,570 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-02 20:05:19,578 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-11-02 20:05:19,578 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-11-02 20:05:19,578 INFO L513 LassoAnalysis]: Proved termination. [2022-11-02 20:05:19,579 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~2#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~2#1 Supporting invariants [] [2022-11-02 20:05:19,593 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-11-02 20:05:19,622 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-11-02 20:05:19,623 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-11-02 20:05:19,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:19,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:19,773 INFO L263 TraceCheckSpWp]: Trace formula consists of 626 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-02 20:05:19,776 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:05:19,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:19,908 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-02 20:05:19,909 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:05:20,123 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:20,124 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2022-11-02 20:05:20,124 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 9454 states and 17619 transitions. cyclomatic complexity: 8199 Second operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:20,379 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_fbaf80fa-6392-47c1-af3d-496ec7bcfdc9/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2022-11-02 20:05:26,130 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 9454 states and 17619 transitions. cyclomatic complexity: 8199. Second operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 99878 states and 187113 transitions. Complement of second has 17 states. [2022-11-02 20:05:26,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2022-11-02 20:05:26,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:26,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 95284 transitions. [2022-11-02 20:05:26,411 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 95284 transitions. Stem has 55 letters. Loop has 8 letters. [2022-11-02 20:05:26,416 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:05:26,416 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 95284 transitions. Stem has 63 letters. Loop has 8 letters. [2022-11-02 20:05:26,420 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:05:26,420 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 95284 transitions. Stem has 55 letters. Loop has 16 letters. [2022-11-02 20:05:26,421 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-02 20:05:26,421 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 99878 states and 187113 transitions. [2022-11-02 20:05:26,789 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15168 [2022-11-02 20:05:27,061 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 99878 states to 58446 states and 109429 transitions. [2022-11-02 20:05:27,061 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58397 [2022-11-02 20:05:27,140 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58398 [2022-11-02 20:05:27,141 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58446 states and 109429 transitions. [2022-11-02 20:05:27,491 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:27,491 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58446 states and 109429 transitions. [2022-11-02 20:05:27,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58446 states and 109429 transitions. [2022-11-02 20:05:27,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58446 to 9478. [2022-11-02 20:05:27,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9478 states, 9478 states have (on average 1.8629457691496096) internal successors, (17657), 9477 states have internal predecessors, (17657), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:27,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9478 states to 9478 states and 17657 transitions. [2022-11-02 20:05:27,995 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9478 states and 17657 transitions. [2022-11-02 20:05:27,996 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:27,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:05:27,999 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:05:27,999 INFO L87 Difference]: Start difference. First operand 9478 states and 17657 transitions. Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:29,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:29,147 INFO L93 Difference]: Finished difference Result 28217 states and 52541 transitions. [2022-11-02 20:05:29,147 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28217 states and 52541 transitions. [2022-11-02 20:05:29,271 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7143 [2022-11-02 20:05:29,378 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28217 states to 28217 states and 52541 transitions. [2022-11-02 20:05:29,379 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28103 [2022-11-02 20:05:29,402 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28103 [2022-11-02 20:05:29,402 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28217 states and 52541 transitions. [2022-11-02 20:05:29,405 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:29,405 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28217 states and 52541 transitions. [2022-11-02 20:05:29,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28217 states and 52541 transitions. [2022-11-02 20:05:29,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28217 to 9493. [2022-11-02 20:05:29,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9493 states, 9493 states have (on average 1.8615822184767723) internal successors, (17672), 9492 states have internal predecessors, (17672), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:29,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9493 states to 9493 states and 17672 transitions. [2022-11-02 20:05:29,663 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9493 states and 17672 transitions. [2022-11-02 20:05:29,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:05:29,665 INFO L428 stractBuchiCegarLoop]: Abstraction has 9493 states and 17672 transitions. [2022-11-02 20:05:29,665 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-11-02 20:05:29,665 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9493 states and 17672 transitions. [2022-11-02 20:05:29,702 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:29,703 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:29,703 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:29,705 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:29,706 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:29,706 INFO L748 eck$LassoCheckResult]: Stem: 315301#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 313478#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 313147#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 313148#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 309948#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 309949#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 315388#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 309641#L1917 assume !(0 == getOrigin_~person#1); 309642#L1921 assume !(1 == getOrigin_~person#1); 314884#L1925 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 307765#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 315579#L3097 assume 0 == initPersonOnFloor_~floor#1; 312621#L3098 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 307498#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 313641#L2889 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 309102#L2901-2 assume { :end_inline_callOnFloor } true; 314713#L3241 assume { :end_inline_initPersonOnFloor } true; 314714#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 314842#L1917-1 assume !(0 == getOrigin_~person#1); 311429#L1921-1 assume !(1 == getOrigin_~person#1); 309457#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 306947#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 314165#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 312572#L3098-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 306391#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 310639#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 311351#L2901-5 assume { :end_inline_callOnFloor } true; 311694#L3241-1 assume { :end_inline_initPersonOnFloor } true; 311695#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 311118#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 311119#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 315268#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 307619#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 307620#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 310844#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 310846#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 313966#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 312851#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 313422#L1397 assume !(0 != timeShift_~tmp___9~2#1); 313140#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 309990#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 309991#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 312002#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 311823#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 311824#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 313790#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 308636#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 306339#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 306340#L1156 assume !(1 == ~currentHeading~0); 306393#L1166 assume !(0 == ~currentFloorID~0); 306394#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 310838#L1172-1 assume { :end_inline_continueInDirection } true; 314496#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 308835#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 308837#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 308069#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 308070#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 313369#L1770-2 [2022-11-02 20:05:29,707 INFO L750 eck$LassoCheckResult]: Loop: 313369#L1770-2 assume !false; 309434#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 309435#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 306296#L1779-2 assume !false; 312673#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 312675#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 313369#L1770-2 [2022-11-02 20:05:29,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:29,709 INFO L85 PathProgramCache]: Analyzing trace with hash 992492226, now seen corresponding path program 1 times [2022-11-02 20:05:29,709 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:29,710 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2024343328] [2022-11-02 20:05:29,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:29,711 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:29,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:29,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:29,873 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:29,873 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2024343328] [2022-11-02 20:05:29,874 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2024343328] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:29,874 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:29,874 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:05:29,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [762187312] [2022-11-02 20:05:29,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:29,875 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:29,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:29,876 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 1 times [2022-11-02 20:05:29,876 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:29,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [945325454] [2022-11-02 20:05:29,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:29,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:29,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:29,886 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:29,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:29,897 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:29,944 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:29,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:05:29,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:05:29,945 INFO L87 Difference]: Start difference. First operand 9493 states and 17672 transitions. cyclomatic complexity: 8214 Second operand has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:30,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:30,492 INFO L93 Difference]: Finished difference Result 18807 states and 35017 transitions. [2022-11-02 20:05:30,493 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18807 states and 35017 transitions. [2022-11-02 20:05:30,581 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4762 [2022-11-02 20:05:30,658 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18807 states to 18807 states and 35017 transitions. [2022-11-02 20:05:30,658 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18731 [2022-11-02 20:05:30,676 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18731 [2022-11-02 20:05:30,677 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18807 states and 35017 transitions. [2022-11-02 20:05:30,692 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:30,692 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18807 states and 35017 transitions. [2022-11-02 20:05:30,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18807 states and 35017 transitions. [2022-11-02 20:05:30,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18807 to 9459. [2022-11-02 20:05:30,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9459 states, 9459 states have (on average 1.8610846812559467) internal successors, (17604), 9458 states have internal predecessors, (17604), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:30,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9459 states to 9459 states and 17604 transitions. [2022-11-02 20:05:30,958 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9459 states and 17604 transitions. [2022-11-02 20:05:30,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:05:30,962 INFO L428 stractBuchiCegarLoop]: Abstraction has 9459 states and 17604 transitions. [2022-11-02 20:05:30,962 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-11-02 20:05:30,963 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9459 states and 17604 transitions. [2022-11-02 20:05:31,013 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:31,013 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:31,013 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:31,018 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:31,018 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:31,019 INFO L748 eck$LassoCheckResult]: Stem: 343579#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 341761#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 341433#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 341434#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 338247#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 338248#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 343666#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 337941#L1917 assume !(0 == getOrigin_~person#1); 337942#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 343162#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 343856#L3097 assume !(0 == initPersonOnFloor_~floor#1); 343771#L3124 assume !(1 == initPersonOnFloor_~floor#1); 335667#L3151 assume !(2 == initPersonOnFloor_~floor#1); 335668#L3178 assume 3 == initPersonOnFloor_~floor#1; 342018#L3179 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 335804#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 341921#L2889 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 337404#L2901-2 assume { :end_inline_callOnFloor } true; 342992#L3241 assume { :end_inline_initPersonOnFloor } true; 342993#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 343121#L1917-1 assume !(0 == getOrigin_~person#1); 339723#L1921-1 assume !(1 == getOrigin_~person#1); 337757#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 335253#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 343894#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 340864#L3098-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 334697#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 338937#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 339645#L2901-5 assume { :end_inline_callOnFloor } true; 339988#L3241-1 assume { :end_inline_initPersonOnFloor } true; 339989#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 339414#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 339415#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 343547#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 335925#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 335926#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 339140#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 339142#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 342246#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 341138#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 341705#L1397 assume !(0 != timeShift_~tmp___9~2#1); 341426#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 338291#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 338292#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 340298#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 340117#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 340118#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 342070#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 336938#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 334645#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 334646#L1156 assume !(1 == ~currentHeading~0); 334699#L1166 assume !(0 == ~currentFloorID~0); 334700#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 339134#L1172-1 assume { :end_inline_continueInDirection } true; 342775#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 337137#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 337139#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 336371#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 336372#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 341655#L1770-2 [2022-11-02 20:05:31,020 INFO L750 eck$LassoCheckResult]: Loop: 341655#L1770-2 assume !false; 337734#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 337735#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 334605#L1779-2 assume !false; 340963#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 340965#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 341655#L1770-2 [2022-11-02 20:05:31,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:31,021 INFO L85 PathProgramCache]: Analyzing trace with hash -1486168651, now seen corresponding path program 1 times [2022-11-02 20:05:31,021 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:31,026 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650065671] [2022-11-02 20:05:31,026 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:31,027 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:31,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:31,264 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:31,264 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:31,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650065671] [2022-11-02 20:05:31,265 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650065671] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:31,265 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:31,266 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:05:31,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1335848629] [2022-11-02 20:05:31,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:31,267 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:31,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:31,267 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 2 times [2022-11-02 20:05:31,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:31,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1017478796] [2022-11-02 20:05:31,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:31,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:31,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:31,274 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:31,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:31,286 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:31,313 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:31,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:05:31,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:05:31,314 INFO L87 Difference]: Start difference. First operand 9459 states and 17604 transitions. cyclomatic complexity: 8180 Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:31,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:31,993 INFO L93 Difference]: Finished difference Result 13205 states and 24576 transitions. [2022-11-02 20:05:31,993 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13205 states and 24576 transitions. [2022-11-02 20:05:32,084 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4394 [2022-11-02 20:05:32,144 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13205 states to 13205 states and 24576 transitions. [2022-11-02 20:05:32,145 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13167 [2022-11-02 20:05:32,159 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13167 [2022-11-02 20:05:32,160 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13205 states and 24576 transitions. [2022-11-02 20:05:32,161 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:32,162 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13205 states and 24576 transitions. [2022-11-02 20:05:32,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13205 states and 24576 transitions. [2022-11-02 20:05:32,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13205 to 9459. [2022-11-02 20:05:32,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9459 states, 9459 states have (on average 1.8604503647320012) internal successors, (17598), 9458 states have internal predecessors, (17598), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:32,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9459 states to 9459 states and 17598 transitions. [2022-11-02 20:05:32,590 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9459 states and 17598 transitions. [2022-11-02 20:05:32,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:05:32,591 INFO L428 stractBuchiCegarLoop]: Abstraction has 9459 states and 17598 transitions. [2022-11-02 20:05:32,591 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-11-02 20:05:32,592 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9459 states and 17598 transitions. [2022-11-02 20:05:32,629 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:32,629 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:32,630 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:32,631 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:32,631 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:32,631 INFO L748 eck$LassoCheckResult]: Stem: 366256#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 364438#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 364110#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 364111#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 360924#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 360925#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 366343#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 360618#L1917 assume !(0 == getOrigin_~person#1); 360619#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 365839#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 366533#L3097 assume !(0 == initPersonOnFloor_~floor#1); 366448#L3124 assume !(1 == initPersonOnFloor_~floor#1); 358342#L3151 assume !(2 == initPersonOnFloor_~floor#1); 358343#L3178 assume 3 == initPersonOnFloor_~floor#1; 364695#L3179 assume !(0 == initPersonOnFloor_~person#1); 361193#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 358481#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 364598#L2889 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 360081#L2901-2 assume { :end_inline_callOnFloor } true; 365669#L3241 assume { :end_inline_initPersonOnFloor } true; 365670#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 365798#L1917-1 assume !(0 == getOrigin_~person#1); 362400#L1921-1 assume !(1 == getOrigin_~person#1); 360434#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 357930#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 366575#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 363541#L3098-2 assume !(0 == initPersonOnFloor_~person#1); 363404#L3101-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 357374#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 361614#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 362322#L2901-5 assume { :end_inline_callOnFloor } true; 362665#L3241-1 assume { :end_inline_initPersonOnFloor } true; 362666#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 362091#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 362092#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 366223#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 358602#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 358603#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 361817#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 361819#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 364923#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 363815#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 364382#L1397 assume !(0 != timeShift_~tmp___9~2#1); 364103#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 360966#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 360967#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 362973#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 362794#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 362795#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 364747#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 359615#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 357322#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 357323#L1156 assume !(1 == ~currentHeading~0); 357376#L1166 assume !(0 == ~currentFloorID~0); 357377#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 361811#L1172-1 assume { :end_inline_continueInDirection } true; 365452#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 359814#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 359816#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 359048#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 359049#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 364332#L1770-2 [2022-11-02 20:05:32,632 INFO L750 eck$LassoCheckResult]: Loop: 364332#L1770-2 assume !false; 360411#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 360412#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 357279#L1779-2 assume !false; 363640#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 363642#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 364332#L1770-2 [2022-11-02 20:05:32,632 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:32,632 INFO L85 PathProgramCache]: Analyzing trace with hash -1146851719, now seen corresponding path program 1 times [2022-11-02 20:05:32,633 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:32,633 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1242443116] [2022-11-02 20:05:32,633 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:32,633 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:32,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:32,728 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:32,728 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:32,729 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1242443116] [2022-11-02 20:05:32,729 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1242443116] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:32,729 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:32,729 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:05:32,730 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [11116684] [2022-11-02 20:05:32,730 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:32,730 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:32,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:32,731 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 3 times [2022-11-02 20:05:32,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:32,731 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1411175660] [2022-11-02 20:05:32,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:32,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:32,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:32,736 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:32,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:32,742 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:32,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:32,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:05:32,766 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:05:32,767 INFO L87 Difference]: Start difference. First operand 9459 states and 17598 transitions. cyclomatic complexity: 8174 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:33,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:33,418 INFO L93 Difference]: Finished difference Result 28176 states and 52455 transitions. [2022-11-02 20:05:33,418 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28176 states and 52455 transitions. [2022-11-02 20:05:33,523 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7143 [2022-11-02 20:05:33,602 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28176 states to 28176 states and 52455 transitions. [2022-11-02 20:05:33,602 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28062 [2022-11-02 20:05:33,628 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28062 [2022-11-02 20:05:33,629 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28176 states and 52455 transitions. [2022-11-02 20:05:33,635 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:33,635 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28176 states and 52455 transitions. [2022-11-02 20:05:33,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28176 states and 52455 transitions. [2022-11-02 20:05:34,156 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28176 to 9463. [2022-11-02 20:05:34,170 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9463 states, 9463 states have (on average 1.8599809785480292) internal successors, (17601), 9462 states have internal predecessors, (17601), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:34,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9463 states to 9463 states and 17601 transitions. [2022-11-02 20:05:34,193 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9463 states and 17601 transitions. [2022-11-02 20:05:34,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:05:34,196 INFO L428 stractBuchiCegarLoop]: Abstraction has 9463 states and 17601 transitions. [2022-11-02 20:05:34,196 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-11-02 20:05:34,196 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9463 states and 17601 transitions. [2022-11-02 20:05:34,233 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:34,233 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:34,233 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:34,244 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:34,244 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:34,245 INFO L748 eck$LassoCheckResult]: Stem: 403904#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 402085#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 401757#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 401758#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 398570#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 398571#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 403991#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 398264#L1917 assume !(0 == getOrigin_~person#1); 398265#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 403486#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 404181#L3097 assume !(0 == initPersonOnFloor_~floor#1); 404096#L3124 assume !(1 == initPersonOnFloor_~floor#1); 395987#L3151 assume !(2 == initPersonOnFloor_~floor#1); 395988#L3178 assume 3 == initPersonOnFloor_~floor#1; 402342#L3179 assume !(0 == initPersonOnFloor_~person#1); 398839#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 396126#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 402245#L2889 assume !(0 == callOnFloor_~floorID#1); 397726#L2892 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 397727#L2901-2 assume { :end_inline_callOnFloor } true; 403316#L3241 assume { :end_inline_initPersonOnFloor } true; 403317#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 403445#L1917-1 assume !(0 == getOrigin_~person#1); 400046#L1921-1 assume !(1 == getOrigin_~person#1); 398080#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 395574#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 404218#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 401188#L3098-2 assume !(0 == initPersonOnFloor_~person#1); 401051#L3101-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 395018#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 399260#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 400898#L2901-5 assume { :end_inline_callOnFloor } true; 400311#L3241-1 assume { :end_inline_initPersonOnFloor } true; 400312#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 399737#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 399738#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 403872#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 396247#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 396248#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 399463#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 399465#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 402570#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 401462#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 402029#L1397 assume !(0 != timeShift_~tmp___9~2#1); 401750#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 398612#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 398613#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 400619#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 400440#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 400441#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 402394#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 397260#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 394966#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 394967#L1156 assume !(1 == ~currentHeading~0); 395020#L1166 assume !(0 == ~currentFloorID~0); 395021#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399457#L1172-1 assume { :end_inline_continueInDirection } true; 403099#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 397459#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 397461#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 396693#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 396694#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 401979#L1770-2 [2022-11-02 20:05:34,245 INFO L750 eck$LassoCheckResult]: Loop: 401979#L1770-2 assume !false; 398057#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 398058#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 394923#L1779-2 assume !false; 401287#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 401289#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 401979#L1770-2 [2022-11-02 20:05:34,246 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:34,246 INFO L85 PathProgramCache]: Analyzing trace with hash -1965093356, now seen corresponding path program 1 times [2022-11-02 20:05:34,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:34,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1555441347] [2022-11-02 20:05:34,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:34,247 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:34,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:34,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:34,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:34,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1555441347] [2022-11-02 20:05:34,380 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1555441347] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:34,380 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:34,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:05:34,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1474960413] [2022-11-02 20:05:34,380 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:34,381 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:34,381 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:34,381 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 4 times [2022-11-02 20:05:34,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:34,388 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [898233434] [2022-11-02 20:05:34,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:34,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:34,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:34,395 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:34,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:34,400 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:34,423 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:34,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:05:34,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:05:34,424 INFO L87 Difference]: Start difference. First operand 9463 states and 17601 transitions. cyclomatic complexity: 8173 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:34,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:34,966 INFO L93 Difference]: Finished difference Result 28181 states and 52457 transitions. [2022-11-02 20:05:34,966 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28181 states and 52457 transitions. [2022-11-02 20:05:35,071 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7143 [2022-11-02 20:05:35,451 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28181 states to 28181 states and 52457 transitions. [2022-11-02 20:05:35,452 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28067 [2022-11-02 20:05:35,474 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28067 [2022-11-02 20:05:35,474 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28181 states and 52457 transitions. [2022-11-02 20:05:35,476 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:35,476 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28181 states and 52457 transitions. [2022-11-02 20:05:35,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28181 states and 52457 transitions. [2022-11-02 20:05:35,680 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28181 to 9469. [2022-11-02 20:05:35,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9469 states, 9469 states have (on average 1.8593304467208787) internal successors, (17606), 9468 states have internal predecessors, (17606), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:35,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9469 states to 9469 states and 17606 transitions. [2022-11-02 20:05:35,717 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9469 states and 17606 transitions. [2022-11-02 20:05:35,733 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:05:35,734 INFO L428 stractBuchiCegarLoop]: Abstraction has 9469 states and 17606 transitions. [2022-11-02 20:05:35,734 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-11-02 20:05:35,734 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9469 states and 17606 transitions. [2022-11-02 20:05:35,773 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:35,773 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:35,774 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:35,774 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:35,775 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:35,775 INFO L748 eck$LassoCheckResult]: Stem: 441561#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 439740#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 439412#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 439413#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 436223#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 436224#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 441648#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 435916#L1917 assume !(0 == getOrigin_~person#1); 435917#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 441143#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 441838#L3097 assume !(0 == initPersonOnFloor_~floor#1); 441753#L3124 assume !(1 == initPersonOnFloor_~floor#1); 433640#L3151 assume !(2 == initPersonOnFloor_~floor#1); 433641#L3178 assume 3 == initPersonOnFloor_~floor#1; 439997#L3179 assume !(0 == initPersonOnFloor_~person#1); 436493#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 433779#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 439900#L2889 assume !(0 == callOnFloor_~floorID#1); 435379#L2892 assume !(1 == callOnFloor_~floorID#1); 435380#L2895 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 440199#L2901-2 assume { :end_inline_callOnFloor } true; 440973#L3241 assume { :end_inline_initPersonOnFloor } true; 440974#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 441102#L1917-1 assume !(0 == getOrigin_~person#1); 437700#L1921-1 assume !(1 == getOrigin_~person#1); 435732#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 433227#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 441875#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 438842#L3098-2 assume !(0 == initPersonOnFloor_~person#1); 438705#L3101-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 432671#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 441885#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 438552#L2901-5 assume { :end_inline_callOnFloor } true; 437965#L3241-1 assume { :end_inline_initPersonOnFloor } true; 437966#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 437391#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 437392#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 441528#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 433900#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 433901#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 437117#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 437119#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 440226#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 439117#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 439684#L1397 assume !(0 != timeShift_~tmp___9~2#1); 439405#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 436265#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 436266#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 438273#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 438094#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 438095#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 440049#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 434913#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 432619#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 432620#L1156 assume !(1 == ~currentHeading~0); 432673#L1166 assume !(0 == ~currentFloorID~0); 432674#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 437111#L1172-1 assume { :end_inline_continueInDirection } true; 440755#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 435112#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 435114#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 434346#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 434347#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 439634#L1770-2 [2022-11-02 20:05:35,776 INFO L750 eck$LassoCheckResult]: Loop: 439634#L1770-2 assume !false; 435709#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 435710#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 432576#L1779-2 assume !false; 438941#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 438943#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 439634#L1770-2 [2022-11-02 20:05:35,776 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:35,776 INFO L85 PathProgramCache]: Analyzing trace with hash 1905684660, now seen corresponding path program 1 times [2022-11-02 20:05:35,776 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:35,777 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1490950131] [2022-11-02 20:05:35,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:35,777 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:35,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:35,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:35,902 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:35,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1490950131] [2022-11-02 20:05:35,903 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1490950131] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:35,903 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:35,903 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:05:35,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [123628990] [2022-11-02 20:05:35,904 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:35,904 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:35,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:35,906 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 5 times [2022-11-02 20:05:35,906 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:35,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1972995759] [2022-11-02 20:05:35,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:35,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:35,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:35,913 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:35,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:35,918 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:35,939 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:35,940 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:05:35,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:05:35,941 INFO L87 Difference]: Start difference. First operand 9469 states and 17606 transitions. cyclomatic complexity: 8172 Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:36,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:36,517 INFO L93 Difference]: Finished difference Result 28188 states and 52461 transitions. [2022-11-02 20:05:36,517 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28188 states and 52461 transitions. [2022-11-02 20:05:36,928 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7143 [2022-11-02 20:05:37,028 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28188 states to 28188 states and 52461 transitions. [2022-11-02 20:05:37,029 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28074 [2022-11-02 20:05:37,051 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28074 [2022-11-02 20:05:37,051 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28188 states and 52461 transitions. [2022-11-02 20:05:37,074 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:37,074 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28188 states and 52461 transitions. [2022-11-02 20:05:37,104 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28188 states and 52461 transitions. [2022-11-02 20:05:37,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28188 to 9477. [2022-11-02 20:05:37,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9477 states, 9477 states have (on average 1.8584995251661918) internal successors, (17613), 9476 states have internal predecessors, (17613), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:37,358 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9477 states to 9477 states and 17613 transitions. [2022-11-02 20:05:37,359 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9477 states and 17613 transitions. [2022-11-02 20:05:37,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:05:37,360 INFO L428 stractBuchiCegarLoop]: Abstraction has 9477 states and 17613 transitions. [2022-11-02 20:05:37,361 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-11-02 20:05:37,361 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9477 states and 17613 transitions. [2022-11-02 20:05:37,396 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:37,397 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:37,397 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:37,398 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:37,398 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:37,399 INFO L748 eck$LassoCheckResult]: Stem: 479227#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 477407#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 477079#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 477080#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 473889#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 473890#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 479314#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 473581#L1917 assume !(0 == getOrigin_~person#1); 473582#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 478811#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 479505#L3097 assume !(0 == initPersonOnFloor_~floor#1); 479420#L3124 assume !(1 == initPersonOnFloor_~floor#1); 471308#L3151 assume !(2 == initPersonOnFloor_~floor#1); 471309#L3178 assume 3 == initPersonOnFloor_~floor#1; 477664#L3179 assume !(0 == initPersonOnFloor_~person#1); 474159#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 471445#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 477567#L2889 assume !(0 == callOnFloor_~floorID#1); 473044#L2892 assume !(1 == callOnFloor_~floorID#1); 473045#L2895 assume !(2 == callOnFloor_~floorID#1); 477866#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 479355#L2901-2 assume { :end_inline_callOnFloor } true; 478640#L3241 assume { :end_inline_initPersonOnFloor } true; 478641#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 478769#L1917-1 assume !(0 == getOrigin_~person#1); 475366#L1921-1 assume !(1 == getOrigin_~person#1); 473397#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 470893#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 479542#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 476509#L3098-2 assume !(0 == initPersonOnFloor_~person#1); 476372#L3101-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 470337#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 479553#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 476219#L2901-5 assume { :end_inline_callOnFloor } true; 475632#L3241-1 assume { :end_inline_initPersonOnFloor } true; 475633#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 475058#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 475059#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 479195#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 471566#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 471567#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 474784#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 474786#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 477892#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 476783#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 477351#L1397 assume !(0 != timeShift_~tmp___9~2#1); 477072#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 473933#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 473934#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 475942#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 475761#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 475762#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 477716#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 472578#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 470285#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 470286#L1156 assume !(1 == ~currentHeading~0); 470339#L1166 assume !(0 == ~currentFloorID~0); 470340#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 474778#L1172-1 assume { :end_inline_continueInDirection } true; 478422#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 472777#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 472779#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 472011#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 472012#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 477301#L1770-2 [2022-11-02 20:05:37,399 INFO L750 eck$LassoCheckResult]: Loop: 477301#L1770-2 assume !false; 473374#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 473375#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 470245#L1779-2 assume !false; 476608#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 476610#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 477301#L1770-2 [2022-11-02 20:05:37,400 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:37,400 INFO L85 PathProgramCache]: Analyzing trace with hash 812216559, now seen corresponding path program 1 times [2022-11-02 20:05:37,400 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:37,401 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1371402532] [2022-11-02 20:05:37,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:37,401 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:37,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:37,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:37,571 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:37,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1371402532] [2022-11-02 20:05:37,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1371402532] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:37,572 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:37,572 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:05:37,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [655083199] [2022-11-02 20:05:37,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:37,573 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:37,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:37,573 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 6 times [2022-11-02 20:05:37,574 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:37,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [177111836] [2022-11-02 20:05:37,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:37,574 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:37,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:37,580 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:37,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:37,585 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:37,609 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:37,610 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:05:37,610 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:05:37,611 INFO L87 Difference]: Start difference. First operand 9477 states and 17613 transitions. cyclomatic complexity: 8171 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:38,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:38,306 INFO L93 Difference]: Finished difference Result 20771 states and 38642 transitions. [2022-11-02 20:05:38,306 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20771 states and 38642 transitions. [2022-11-02 20:05:38,413 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8420 [2022-11-02 20:05:38,485 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20771 states to 20771 states and 38642 transitions. [2022-11-02 20:05:38,485 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20733 [2022-11-02 20:05:38,502 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20733 [2022-11-02 20:05:38,502 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20771 states and 38642 transitions. [2022-11-02 20:05:38,518 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:38,518 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20771 states and 38642 transitions. [2022-11-02 20:05:38,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20771 states and 38642 transitions. [2022-11-02 20:05:39,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20771 to 9463. [2022-11-02 20:05:39,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9463 states, 9463 states have (on average 1.858501532283631) internal successors, (17587), 9462 states have internal predecessors, (17587), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:39,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9463 states to 9463 states and 17587 transitions. [2022-11-02 20:05:39,142 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9463 states and 17587 transitions. [2022-11-02 20:05:39,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:05:39,144 INFO L428 stractBuchiCegarLoop]: Abstraction has 9463 states and 17587 transitions. [2022-11-02 20:05:39,144 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-11-02 20:05:39,144 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9463 states and 17587 transitions. [2022-11-02 20:05:39,183 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:39,183 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:39,183 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:39,191 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:39,191 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:39,192 INFO L748 eck$LassoCheckResult]: Stem: 509483#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 507664#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 507336#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 507337#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 504148#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 504149#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 509570#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 503839#L1917 assume !(0 == getOrigin_~person#1); 503840#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 509066#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 509761#L3097 assume !(0 == initPersonOnFloor_~floor#1); 509676#L3124 assume !(1 == initPersonOnFloor_~floor#1); 501567#L3151 assume !(2 == initPersonOnFloor_~floor#1); 501568#L3178 assume 3 == initPersonOnFloor_~floor#1; 507921#L3179 assume !(0 == initPersonOnFloor_~person#1); 504419#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 501704#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 507824#L2889 assume !(0 == callOnFloor_~floorID#1); 503303#L2892 assume !(1 == callOnFloor_~floorID#1); 503304#L2895 assume !(2 == callOnFloor_~floorID#1); 508123#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 509611#L2901-2 assume { :end_inline_callOnFloor } true; 508895#L3241 assume { :end_inline_initPersonOnFloor } true; 508896#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 509025#L1917-1 assume !(0 == getOrigin_~person#1); 505627#L1921-1 assume !(1 == getOrigin_~person#1); 503654#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 503655#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 508348#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 504196#L3124-1 assume 1 == initPersonOnFloor_~floor#1; 504197#L3125-2 assume !(0 == initPersonOnFloor_~person#1); 509095#L3128-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 504081#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 509804#L2889-2 assume !(0 == callOnFloor_~floorID#1); 509802#L2892-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 506478#L2901-5 assume { :end_inline_callOnFloor } true; 505891#L3241-1 assume { :end_inline_initPersonOnFloor } true; 505892#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 505318#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 505319#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 509451#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 501825#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 501826#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 505043#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 505045#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 508149#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 507041#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 507608#L1397 assume !(0 != timeShift_~tmp___9~2#1); 507329#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 504192#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 504193#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 506199#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 506020#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 506021#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 507973#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 502837#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 500549#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 500550#L1156 assume !(1 == ~currentHeading~0); 500600#L1166 assume !(0 == ~currentFloorID~0); 500601#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 505037#L1172-1 assume { :end_inline_continueInDirection } true; 508678#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 503036#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 503038#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 502270#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 502271#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 507558#L1770-2 [2022-11-02 20:05:39,192 INFO L750 eck$LassoCheckResult]: Loop: 507558#L1770-2 assume !false; 503631#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 503632#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 500506#L1779-2 assume !false; 506867#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 506869#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 507558#L1770-2 [2022-11-02 20:05:39,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:39,193 INFO L85 PathProgramCache]: Analyzing trace with hash -1877153083, now seen corresponding path program 1 times [2022-11-02 20:05:39,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:39,195 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2112217578] [2022-11-02 20:05:39,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:39,196 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:39,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:39,351 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:39,353 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:39,354 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2112217578] [2022-11-02 20:05:39,354 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2112217578] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:39,354 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:39,354 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:05:39,355 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [967937393] [2022-11-02 20:05:39,355 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:39,355 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:39,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:39,356 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 7 times [2022-11-02 20:05:39,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:39,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2089955860] [2022-11-02 20:05:39,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:39,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:39,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:39,364 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:39,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:39,369 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:39,391 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:39,392 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:05:39,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:05:39,393 INFO L87 Difference]: Start difference. First operand 9463 states and 17587 transitions. cyclomatic complexity: 8159 Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:39,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:39,937 INFO L93 Difference]: Finished difference Result 20745 states and 38593 transitions. [2022-11-02 20:05:39,938 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20745 states and 38593 transitions. [2022-11-02 20:05:40,009 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8420 [2022-11-02 20:05:40,062 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20745 states to 20745 states and 38593 transitions. [2022-11-02 20:05:40,062 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20707 [2022-11-02 20:05:40,076 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20707 [2022-11-02 20:05:40,077 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20745 states and 38593 transitions. [2022-11-02 20:05:40,085 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:40,085 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20745 states and 38593 transitions. [2022-11-02 20:05:40,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20745 states and 38593 transitions. [2022-11-02 20:05:40,252 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20745 to 9457. [2022-11-02 20:05:40,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9457 states, 9457 states have (on average 1.858306016707201) internal successors, (17574), 9456 states have internal predecessors, (17574), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:40,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9457 states to 9457 states and 17574 transitions. [2022-11-02 20:05:40,286 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9457 states and 17574 transitions. [2022-11-02 20:05:40,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:05:40,287 INFO L428 stractBuchiCegarLoop]: Abstraction has 9457 states and 17574 transitions. [2022-11-02 20:05:40,287 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-11-02 20:05:40,288 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9457 states and 17574 transitions. [2022-11-02 20:05:40,323 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:40,323 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:40,323 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:40,325 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:40,325 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:40,325 INFO L748 eck$LassoCheckResult]: Stem: 539701#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 537886#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 537558#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 537559#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 534369#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 534370#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 539788#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 534063#L1917 assume !(0 == getOrigin_~person#1); 534064#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 539287#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 539981#L3097 assume !(0 == initPersonOnFloor_~floor#1); 539894#L3124 assume !(1 == initPersonOnFloor_~floor#1); 531789#L3151 assume !(2 == initPersonOnFloor_~floor#1); 531790#L3178 assume 3 == initPersonOnFloor_~floor#1; 538143#L3179 assume !(0 == initPersonOnFloor_~person#1); 534639#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 531928#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 538046#L2889 assume !(0 == callOnFloor_~floorID#1); 533527#L2892 assume !(1 == callOnFloor_~floorID#1); 533528#L2895 assume !(2 == callOnFloor_~floorID#1); 538345#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 539829#L2901-2 assume { :end_inline_callOnFloor } true; 539118#L3241 assume { :end_inline_initPersonOnFloor } true; 539119#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 539246#L1917-1 assume !(0 == getOrigin_~person#1); 535847#L1921-1 assume !(1 == getOrigin_~person#1); 533878#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 533879#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 538570#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 534417#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 534418#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 534894#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 534895#L3155-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 535060#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 535061#L2889-2 assume !(0 == callOnFloor_~floorID#1); 537243#L2892-2 assume !(1 == callOnFloor_~floorID#1); 537244#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 536698#L2901-5 assume { :end_inline_callOnFloor } true; 536111#L3241-1 assume { :end_inline_initPersonOnFloor } true; 536112#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 535538#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 535539#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 539669#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 532049#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 532050#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 535264#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 535266#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 538371#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 537262#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 537830#L1397 assume !(0 != timeShift_~tmp___9~2#1); 537551#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 534413#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 534414#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 536419#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 536240#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 536241#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 538195#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 533061#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 530773#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 530774#L1156 assume !(1 == ~currentHeading~0); 530824#L1166 assume !(0 == ~currentFloorID~0); 530825#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 535258#L1172-1 assume { :end_inline_continueInDirection } true; 538901#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 533260#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 533262#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 532494#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 532495#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 537780#L1770-2 [2022-11-02 20:05:40,326 INFO L750 eck$LassoCheckResult]: Loop: 537780#L1770-2 assume !false; 533855#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 533856#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 530730#L1779-2 assume !false; 537087#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 537089#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 537780#L1770-2 [2022-11-02 20:05:40,326 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:40,327 INFO L85 PathProgramCache]: Analyzing trace with hash -2042376538, now seen corresponding path program 1 times [2022-11-02 20:05:40,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:40,327 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [971453896] [2022-11-02 20:05:40,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:40,328 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:40,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:40,663 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:40,663 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:40,663 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [971453896] [2022-11-02 20:05:40,663 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [971453896] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:40,664 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:40,664 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:05:40,665 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [637457241] [2022-11-02 20:05:40,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:40,666 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:40,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:40,667 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 8 times [2022-11-02 20:05:40,667 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:40,668 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2045790823] [2022-11-02 20:05:40,668 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:40,668 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:40,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:40,673 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:40,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:40,677 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:40,701 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:40,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:05:40,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:05:40,702 INFO L87 Difference]: Start difference. First operand 9457 states and 17574 transitions. cyclomatic complexity: 8152 Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:41,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:41,214 INFO L93 Difference]: Finished difference Result 13244 states and 24603 transitions. [2022-11-02 20:05:41,214 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13244 states and 24603 transitions. [2022-11-02 20:05:41,281 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4394 [2022-11-02 20:05:41,331 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13244 states to 13244 states and 24603 transitions. [2022-11-02 20:05:41,331 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13206 [2022-11-02 20:05:41,344 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13206 [2022-11-02 20:05:41,344 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13244 states and 24603 transitions. [2022-11-02 20:05:41,345 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:41,345 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13244 states and 24603 transitions. [2022-11-02 20:05:41,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13244 states and 24603 transitions. [2022-11-02 20:05:41,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13244 to 9457. [2022-11-02 20:05:41,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9457 states, 9457 states have (on average 1.8574600824785872) internal successors, (17566), 9456 states have internal predecessors, (17566), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:41,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9457 states to 9457 states and 17566 transitions. [2022-11-02 20:05:41,513 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9457 states and 17566 transitions. [2022-11-02 20:05:41,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:05:41,515 INFO L428 stractBuchiCegarLoop]: Abstraction has 9457 states and 17566 transitions. [2022-11-02 20:05:41,515 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-11-02 20:05:41,515 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9457 states and 17566 transitions. [2022-11-02 20:05:41,557 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:41,557 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:41,557 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:41,558 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:41,558 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:41,559 INFO L748 eck$LassoCheckResult]: Stem: 562410#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 560592#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 560263#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 560264#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 557080#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 557081#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 562497#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 556774#L1917 assume !(0 == getOrigin_~person#1); 556775#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 561995#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 562688#L3097 assume !(0 == initPersonOnFloor_~floor#1); 562603#L3124 assume !(1 == initPersonOnFloor_~floor#1); 554500#L3151 assume !(2 == initPersonOnFloor_~floor#1); 554501#L3178 assume 3 == initPersonOnFloor_~floor#1; 560849#L3179 assume !(0 == initPersonOnFloor_~person#1); 557349#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 554639#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 560752#L2889 assume !(0 == callOnFloor_~floorID#1); 556238#L2892 assume !(1 == callOnFloor_~floorID#1); 556239#L2895 assume !(2 == callOnFloor_~floorID#1); 561051#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 562538#L2901-2 assume { :end_inline_callOnFloor } true; 561826#L3241 assume { :end_inline_initPersonOnFloor } true; 561827#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 561954#L1917-1 assume !(0 == getOrigin_~person#1); 558556#L1921-1 assume !(1 == getOrigin_~person#1); 556589#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 556590#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 561276#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 557128#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 557129#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 557602#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 557603#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 560103#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 558144#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 562739#L2889-2 assume !(0 == callOnFloor_~floorID#1); 562738#L2892-2 assume !(1 == callOnFloor_~floorID#1); 562737#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 559407#L2901-5 assume { :end_inline_callOnFloor } true; 558819#L3241-1 assume { :end_inline_initPersonOnFloor } true; 558820#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 558248#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 558249#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 562377#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 554760#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 554761#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 557973#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 557975#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 561077#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 559968#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 560536#L1397 assume !(0 != timeShift_~tmp___9~2#1); 560256#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 557122#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 557123#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 559128#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 558948#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 558949#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 560901#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 555772#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 553484#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 553485#L1156 assume !(1 == ~currentHeading~0); 553535#L1166 assume !(0 == ~currentFloorID~0); 553536#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 557967#L1172-1 assume { :end_inline_continueInDirection } true; 561608#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 555971#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 555973#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 555205#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 555206#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 560486#L1770-2 [2022-11-02 20:05:41,559 INFO L750 eck$LassoCheckResult]: Loop: 560486#L1770-2 assume !false; 556566#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 556567#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 553441#L1779-2 assume !false; 559794#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 559796#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 560486#L1770-2 [2022-11-02 20:05:41,560 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:41,560 INFO L85 PathProgramCache]: Analyzing trace with hash 413234797, now seen corresponding path program 1 times [2022-11-02 20:05:41,560 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:41,561 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [275207754] [2022-11-02 20:05:41,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:41,562 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:41,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:41,723 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:41,723 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:41,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [275207754] [2022-11-02 20:05:41,724 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [275207754] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:41,724 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:41,724 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:05:41,724 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [690364141] [2022-11-02 20:05:41,725 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:41,725 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:41,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:41,725 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 9 times [2022-11-02 20:05:41,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:41,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [659893653] [2022-11-02 20:05:41,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:41,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:41,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:41,730 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:41,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:41,734 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:41,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:41,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:05:41,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:05:41,760 INFO L87 Difference]: Start difference. First operand 9457 states and 17566 transitions. cyclomatic complexity: 8144 Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:46,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:46,492 INFO L93 Difference]: Finished difference Result 16605 states and 30346 transitions. [2022-11-02 20:05:46,492 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16605 states and 30346 transitions. [2022-11-02 20:05:46,568 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4292 [2022-11-02 20:05:46,618 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16605 states to 16605 states and 30346 transitions. [2022-11-02 20:05:46,618 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16529 [2022-11-02 20:05:46,628 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16529 [2022-11-02 20:05:46,628 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16605 states and 30346 transitions. [2022-11-02 20:05:46,629 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:46,629 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16605 states and 30346 transitions. [2022-11-02 20:05:46,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16605 states and 30346 transitions. [2022-11-02 20:05:46,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16605 to 9457. [2022-11-02 20:05:46,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9457 states, 9457 states have (on average 1.8172782066194353) internal successors, (17186), 9456 states have internal predecessors, (17186), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:46,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9457 states to 9457 states and 17186 transitions. [2022-11-02 20:05:46,770 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9457 states and 17186 transitions. [2022-11-02 20:05:46,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-02 20:05:46,771 INFO L428 stractBuchiCegarLoop]: Abstraction has 9457 states and 17186 transitions. [2022-11-02 20:05:46,771 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-11-02 20:05:46,772 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9457 states and 17186 transitions. [2022-11-02 20:05:46,797 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-11-02 20:05:46,797 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:46,798 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:46,798 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:46,798 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:46,799 INFO L748 eck$LassoCheckResult]: Stem: 588476#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 586640#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 586311#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 586312#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 583124#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 583125#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 588563#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 582819#L1917 assume !(0 == getOrigin_~person#1); 582820#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 588059#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 588756#L3097 assume !(0 == initPersonOnFloor_~floor#1); 588670#L3124 assume !(1 == initPersonOnFloor_~floor#1); 580561#L3151 assume !(2 == initPersonOnFloor_~floor#1); 580562#L3178 assume 3 == initPersonOnFloor_~floor#1; 586899#L3179 assume !(0 == initPersonOnFloor_~person#1); 583393#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 580698#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 586799#L2889 assume !(0 == callOnFloor_~floorID#1); 582285#L2892 assume !(1 == callOnFloor_~floorID#1); 582286#L2895 assume !(2 == callOnFloor_~floorID#1); 587103#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 588604#L2901-2 assume { :end_inline_callOnFloor } true; 587885#L3241 assume { :end_inline_initPersonOnFloor } true; 587886#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 588016#L1917-1 assume !(0 == getOrigin_~person#1); 584598#L1921-1 assume !(1 == getOrigin_~person#1); 582633#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 582634#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 587331#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 583172#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 583173#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 583645#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 583646#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 586151#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 584185#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 588793#L2889-2 assume !(0 == callOnFloor_~floorID#1); 588792#L2892-2 assume !(1 == callOnFloor_~floorID#1); 588791#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 585449#L2901-5 assume { :end_inline_callOnFloor } true; 584862#L3241-1 assume { :end_inline_initPersonOnFloor } true; 584863#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 584290#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 584291#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 588443#L2826 assume !(0 == isFloorCalling_~floorID#1); 584635#L2830 assume !(1 == isFloorCalling_~floorID#1); 584636#L2834 assume !(2 == isFloorCalling_~floorID#1); 588680#L2838 assume !(3 == isFloorCalling_~floorID#1); 581047#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 580820#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 580821#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 584015#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 584017#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 587131#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 586014#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 586584#L1397 assume !(0 != timeShift_~tmp___9~2#1); 586304#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 583166#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 583167#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 587356#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 585170#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 585171#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 588254#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 588062#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 584990#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 584991#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 586951#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 581823#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 579554#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 579555#L1156 assume !(1 == ~currentHeading~0); 579605#L1166 assume !(0 == ~currentFloorID~0); 579606#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 584009#L1172-1 assume { :end_inline_continueInDirection } true; 587666#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 582020#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 582022#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 581262#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 581263#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 586533#L1770-2 [2022-11-02 20:05:46,800 INFO L750 eck$LassoCheckResult]: Loop: 586533#L1770-2 assume !false; 582610#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 582611#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 579512#L1779-2 assume !false; 585839#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 585841#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 586533#L1770-2 [2022-11-02 20:05:46,800 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:46,800 INFO L85 PathProgramCache]: Analyzing trace with hash 1062454361, now seen corresponding path program 1 times [2022-11-02 20:05:46,801 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:46,801 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [100613980] [2022-11-02 20:05:46,801 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:46,801 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:46,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:46,943 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:46,943 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:46,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [100613980] [2022-11-02 20:05:46,944 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [100613980] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:46,944 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:46,944 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:05:46,944 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2041304198] [2022-11-02 20:05:46,944 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:46,945 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:46,946 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:46,947 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 10 times [2022-11-02 20:05:46,947 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:46,947 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [401784767] [2022-11-02 20:05:46,947 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:46,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:46,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:46,952 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:46,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:46,956 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:46,979 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:46,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:05:46,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:05:46,980 INFO L87 Difference]: Start difference. First operand 9457 states and 17186 transitions. cyclomatic complexity: 7764 Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 5 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:57,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:57,201 INFO L93 Difference]: Finished difference Result 64671 states and 118519 transitions. [2022-11-02 20:05:57,201 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64671 states and 118519 transitions. [2022-11-02 20:05:57,385 INFO L131 ngComponentsAnalysis]: Automaton has 354 accepting balls. 15191 [2022-11-02 20:05:57,536 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64671 states to 64671 states and 118519 transitions. [2022-11-02 20:05:57,537 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 64291 [2022-11-02 20:05:57,569 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 64291 [2022-11-02 20:05:57,569 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64671 states and 118519 transitions. [2022-11-02 20:05:57,571 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:57,571 INFO L218 hiAutomatonCegarLoop]: Abstraction has 64671 states and 118519 transitions. [2022-11-02 20:05:57,611 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64671 states and 118519 transitions. [2022-11-02 20:05:57,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64671 to 18758. [2022-11-02 20:05:57,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18758 states, 18758 states have (on average 1.8183708284465294) internal successors, (34109), 18757 states have internal predecessors, (34109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:57,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18758 states to 18758 states and 34109 transitions. [2022-11-02 20:05:57,931 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18758 states and 34109 transitions. [2022-11-02 20:05:57,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-02 20:05:57,932 INFO L428 stractBuchiCegarLoop]: Abstraction has 18758 states and 34109 transitions. [2022-11-02 20:05:57,932 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-11-02 20:05:57,932 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18758 states and 34109 transitions. [2022-11-02 20:05:57,976 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4736 [2022-11-02 20:05:57,977 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:57,977 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:57,978 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:57,978 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:57,978 INFO L748 eck$LassoCheckResult]: Stem: 662944#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 660919#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 660572#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 660573#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 657302#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 657303#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 663040#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 656991#L1917 assume !(0 == getOrigin_~person#1); 656992#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 662461#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 663297#L3097 assume !(0 == initPersonOnFloor_~floor#1); 663164#L3124 assume !(1 == initPersonOnFloor_~floor#1); 654717#L3151 assume !(2 == initPersonOnFloor_~floor#1); 654718#L3178 assume 3 == initPersonOnFloor_~floor#1; 661194#L3179 assume !(0 == initPersonOnFloor_~person#1); 657574#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 654854#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 661090#L2889 assume !(0 == callOnFloor_~floorID#1); 656452#L2892 assume !(1 == callOnFloor_~floorID#1); 656453#L2895 assume !(2 == callOnFloor_~floorID#1); 661411#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 663086#L2901-2 assume { :end_inline_callOnFloor } true; 662268#L3241 assume { :end_inline_initPersonOnFloor } true; 662269#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 662415#L1917-1 assume !(0 == getOrigin_~person#1); 658801#L1921-1 assume !(1 == getOrigin_~person#1); 656804#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 656805#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 661666#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 657351#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 657352#L3151-1 assume !(2 == initPersonOnFloor_~floor#1); 654523#L3178-1 assume !(3 == initPersonOnFloor_~floor#1); 654525#L3205-2 assume !(4 == initPersonOnFloor_~floor#1); 654438#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 658002#L2889-2 assume !(0 == callOnFloor_~floorID#1); 658720#L2892-2 assume !(1 == callOnFloor_~floorID#1); 660239#L2895-2 assume !(2 == callOnFloor_~floorID#1); 660482#L2898-2 assume !(3 == callOnFloor_~floorID#1); 659677#L2901-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 659678#L2901-5 assume { :end_inline_callOnFloor } true; 663413#L3241-1 assume { :end_inline_initPersonOnFloor } true; 663412#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 663410#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 663408#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 663407#L2826 assume !(0 == isFloorCalling_~floorID#1); 663406#L2830 assume !(1 == isFloorCalling_~floorID#1); 663405#L2834 assume !(2 == isFloorCalling_~floorID#1); 663404#L2838 assume !(3 == isFloorCalling_~floorID#1); 663403#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 663402#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 663401#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 663399#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 661439#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 661440#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 660258#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 660860#L1397 assume !(0 != timeShift_~tmp___9~2#1); 660565#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 657345#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 657346#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 661694#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 659387#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 659388#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 662676#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 662464#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 659202#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 659203#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 661248#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 655985#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 653709#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 653710#L1156 assume !(1 == ~currentHeading~0); 665510#L1166 assume !(0 == ~currentFloorID~0); 665498#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 665042#L1172-1 assume { :end_inline_continueInDirection } true; 665037#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 664973#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 664974#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 664983#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 665598#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 665599#L1770-2 [2022-11-02 20:05:57,979 INFO L750 eck$LassoCheckResult]: Loop: 665599#L1770-2 assume !false; 665596#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 665597#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 665611#L1779-2 assume !false; 665607#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 665605#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 665599#L1770-2 [2022-11-02 20:05:57,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:57,979 INFO L85 PathProgramCache]: Analyzing trace with hash -1885271029, now seen corresponding path program 1 times [2022-11-02 20:05:57,979 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:57,979 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2119445685] [2022-11-02 20:05:57,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:57,980 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:57,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:58,220 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:58,220 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:58,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2119445685] [2022-11-02 20:05:58,221 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2119445685] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:58,221 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:58,221 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:05:58,221 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1759573657] [2022-11-02 20:05:58,221 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:58,221 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:58,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:58,222 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 11 times [2022-11-02 20:05:58,222 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:58,222 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1851435080] [2022-11-02 20:05:58,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:58,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:58,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:58,227 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:58,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:58,233 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:58,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:58,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:05:58,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:05:58,253 INFO L87 Difference]: Start difference. First operand 18758 states and 34109 transitions. cyclomatic complexity: 15421 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:58,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:05:58,608 INFO L93 Difference]: Finished difference Result 33614 states and 61171 transitions. [2022-11-02 20:05:58,608 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33614 states and 61171 transitions. [2022-11-02 20:05:58,715 INFO L131 ngComponentsAnalysis]: Automaton has 102 accepting balls. 12736 [2022-11-02 20:05:58,798 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33614 states to 33614 states and 61171 transitions. [2022-11-02 20:05:58,799 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33538 [2022-11-02 20:05:58,819 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33538 [2022-11-02 20:05:58,819 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33614 states and 61171 transitions. [2022-11-02 20:05:58,820 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:05:58,820 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33614 states and 61171 transitions. [2022-11-02 20:05:58,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33614 states and 61171 transitions. [2022-11-02 20:05:59,009 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33614 to 18730. [2022-11-02 20:05:59,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18730 states, 18730 states have (on average 1.8184196476241323) internal successors, (34059), 18729 states have internal predecessors, (34059), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:05:59,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18730 states to 18730 states and 34059 transitions. [2022-11-02 20:05:59,053 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18730 states and 34059 transitions. [2022-11-02 20:05:59,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:05:59,054 INFO L428 stractBuchiCegarLoop]: Abstraction has 18730 states and 34059 transitions. [2022-11-02 20:05:59,054 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-11-02 20:05:59,055 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18730 states and 34059 transitions. [2022-11-02 20:05:59,097 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4736 [2022-11-02 20:05:59,097 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:05:59,097 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:05:59,098 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:05:59,098 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:05:59,098 INFO L748 eck$LassoCheckResult]: Stem: 715356#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 713321#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 712976#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 712977#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 709674#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 709675#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 715466#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 709365#L1917 assume !(0 == getOrigin_~person#1); 709366#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 714869#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 715746#L3097 assume !(0 == initPersonOnFloor_~floor#1); 715611#L3124 assume !(1 == initPersonOnFloor_~floor#1); 707091#L3151 assume !(2 == initPersonOnFloor_~floor#1); 707092#L3178 assume 3 == initPersonOnFloor_~floor#1; 713601#L3179 assume !(0 == initPersonOnFloor_~person#1); 709950#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 707229#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 713494#L2889 assume !(0 == callOnFloor_~floorID#1); 708830#L2892 assume !(1 == callOnFloor_~floorID#1); 708831#L2895 assume !(2 == callOnFloor_~floorID#1); 713820#L2898 assume !(3 == callOnFloor_~floorID#1); 715517#L2901 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 715672#L2901-2 assume { :end_inline_callOnFloor } true; 714682#L3241 assume { :end_inline_initPersonOnFloor } true; 714683#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 714824#L1917-1 assume !(0 == getOrigin_~person#1); 711187#L1921-1 assume !(1 == getOrigin_~person#1); 709179#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 709180#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 714069#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 709722#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 709723#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 718515#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 718514#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 716550#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 716545#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 716543#L2889-2 assume !(0 == callOnFloor_~floorID#1); 716541#L2892-2 assume !(1 == callOnFloor_~floorID#1); 716001#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 712064#L2901-5 assume { :end_inline_callOnFloor } true; 715887#L3241-1 assume { :end_inline_initPersonOnFloor } true; 715871#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 715868#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 715865#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 715862#L2826 assume !(0 == isFloorCalling_~floorID#1); 715859#L2830 assume !(1 == isFloorCalling_~floorID#1); 715856#L2834 assume !(2 == isFloorCalling_~floorID#1); 715853#L2838 assume !(3 == isFloorCalling_~floorID#1); 715850#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 715847#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 715844#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 715840#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 713849#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 713850#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 712661#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 718522#L1397 assume !(0 != timeShift_~tmp___9~2#1); 718521#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 718520#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 718518#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 718516#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 716551#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 716546#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 716544#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 716542#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 716540#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 716494#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 716062#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 716061#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 716059#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 716058#L1156 assume !(1 == ~currentHeading~0); 716055#L1166 assume !(0 == ~currentFloorID~0); 716049#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 716048#L1172-1 assume { :end_inline_continueInDirection } true; 716044#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 715992#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 715993#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 716301#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 717524#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 717523#L1770-2 [2022-11-02 20:05:59,099 INFO L750 eck$LassoCheckResult]: Loop: 717523#L1770-2 assume !false; 717522#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 717521#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 717520#L1779-2 assume !false; 717518#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 717519#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 717523#L1770-2 [2022-11-02 20:05:59,099 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:59,099 INFO L85 PathProgramCache]: Analyzing trace with hash -2107871655, now seen corresponding path program 1 times [2022-11-02 20:05:59,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:59,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1368468264] [2022-11-02 20:05:59,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:59,100 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:59,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:05:59,211 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:05:59,211 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:05:59,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1368468264] [2022-11-02 20:05:59,211 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1368468264] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:05:59,211 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:05:59,212 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:05:59,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26619779] [2022-11-02 20:05:59,212 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:05:59,212 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:05:59,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:05:59,213 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 12 times [2022-11-02 20:05:59,213 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:05:59,213 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [764879784] [2022-11-02 20:05:59,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:05:59,214 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:05:59,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:59,217 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:05:59,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:05:59,220 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:05:59,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:05:59,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:05:59,238 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:05:59,238 INFO L87 Difference]: Start difference. First operand 18730 states and 34059 transitions. cyclomatic complexity: 15399 Second operand has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:00,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:06:00,119 INFO L93 Difference]: Finished difference Result 46597 states and 84811 transitions. [2022-11-02 20:06:00,120 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46597 states and 84811 transitions. [2022-11-02 20:06:00,321 INFO L131 ngComponentsAnalysis]: Automaton has 144 accepting balls. 17104 [2022-11-02 20:06:00,449 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46597 states to 46597 states and 84811 transitions. [2022-11-02 20:06:00,450 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46483 [2022-11-02 20:06:00,477 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46483 [2022-11-02 20:06:00,477 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46597 states and 84811 transitions. [2022-11-02 20:06:00,478 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:06:00,478 INFO L218 hiAutomatonCegarLoop]: Abstraction has 46597 states and 84811 transitions. [2022-11-02 20:06:00,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46597 states and 84811 transitions. [2022-11-02 20:06:01,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46597 to 18717. [2022-11-02 20:06:01,080 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18717 states, 18717 states have (on average 1.8185072394080248) internal successors, (34037), 18716 states have internal predecessors, (34037), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:01,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18717 states to 18717 states and 34037 transitions. [2022-11-02 20:06:01,106 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18717 states and 34037 transitions. [2022-11-02 20:06:01,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 20:06:01,107 INFO L428 stractBuchiCegarLoop]: Abstraction has 18717 states and 34037 transitions. [2022-11-02 20:06:01,107 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-11-02 20:06:01,107 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18717 states and 34037 transitions. [2022-11-02 20:06:01,153 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4736 [2022-11-02 20:06:01,153 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:06:01,153 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:06:01,154 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:06:01,154 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:06:01,154 INFO L748 eck$LassoCheckResult]: Stem: 780503#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 778579#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 778241#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 778242#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 775013#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 775014#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 780598#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 774705#L1917 assume !(0 == getOrigin_~person#1); 774706#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 780063#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 780819#L3097 assume !(0 == initPersonOnFloor_~floor#1); 780715#L3124 assume !(1 == initPersonOnFloor_~floor#1); 772436#L3151 assume !(2 == initPersonOnFloor_~floor#1); 772437#L3178 assume 3 == initPersonOnFloor_~floor#1; 778844#L3179 assume !(0 == initPersonOnFloor_~person#1); 775285#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 772573#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 778743#L2889 assume !(0 == callOnFloor_~floorID#1); 774166#L2892 assume !(1 == callOnFloor_~floorID#1); 774167#L2895 assume !(2 == callOnFloor_~floorID#1); 779057#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 780644#L2901-2 assume { :end_inline_callOnFloor } true; 779878#L3241 assume { :end_inline_initPersonOnFloor } true; 779879#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 780019#L1917-1 assume !(0 == getOrigin_~person#1); 776505#L1921-1 assume !(1 == getOrigin_~person#1); 774518#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 774519#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 779290#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 775061#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 775062#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 775537#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 775538#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 778078#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 775705#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 775706#L2889-2 assume !(0 == callOnFloor_~floorID#1); 776426#L2892-2 assume !(1 == callOnFloor_~floorID#1); 777922#L2895-2 assume !(2 == callOnFloor_~floorID#1); 778159#L2898-2 assume !(3 == callOnFloor_~floorID#1); 777371#L2901-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 777372#L2901-5 assume { :end_inline_callOnFloor } true; 780932#L3241-1 assume { :end_inline_initPersonOnFloor } true; 780924#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 780908#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 780905#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 780902#L2826 assume !(0 == isFloorCalling_~floorID#1); 780899#L2830 assume !(1 == isFloorCalling_~floorID#1); 780896#L2834 assume !(2 == isFloorCalling_~floorID#1); 780893#L2838 assume !(3 == isFloorCalling_~floorID#1); 780890#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 780887#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 780884#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 780879#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 779085#L507 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 779086#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 777941#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 783349#L1397 assume !(0 != timeShift_~tmp___9~2#1); 783350#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 784237#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 784235#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 784203#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 784198#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 784191#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 784190#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 784189#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 781802#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 781756#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 781751#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 781750#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 781748#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 781747#L1156 assume !(1 == ~currentHeading~0); 781741#L1166 assume !(0 == ~currentFloorID~0); 781738#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 781736#L1172-1 assume { :end_inline_continueInDirection } true; 781732#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 781142#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 781143#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 781226#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 781224#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 781222#L1770-2 [2022-11-02 20:06:01,155 INFO L750 eck$LassoCheckResult]: Loop: 781222#L1770-2 assume !false; 781220#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 781218#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 781215#L1779-2 assume !false; 781212#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 781213#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 781222#L1770-2 [2022-11-02 20:06:01,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:01,155 INFO L85 PathProgramCache]: Analyzing trace with hash 1747701716, now seen corresponding path program 1 times [2022-11-02 20:06:01,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:01,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [610198839] [2022-11-02 20:06:01,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:01,156 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:01,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:06:01,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:06:01,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:06:01,267 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [610198839] [2022-11-02 20:06:01,267 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [610198839] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:06:01,267 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:06:01,267 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:06:01,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [135278788] [2022-11-02 20:06:01,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:06:01,268 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:06:01,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:01,268 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 13 times [2022-11-02 20:06:01,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:01,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1776773631] [2022-11-02 20:06:01,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:01,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:01,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:01,272 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:06:01,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:01,275 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:06:01,295 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:06:01,295 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:06:01,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:06:01,296 INFO L87 Difference]: Start difference. First operand 18717 states and 34037 transitions. cyclomatic complexity: 15390 Second operand has 5 states, 5 states have (on average 15.8) internal successors, (79), 5 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:01,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:06:01,688 INFO L93 Difference]: Finished difference Result 20441 states and 37194 transitions. [2022-11-02 20:06:01,688 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20441 states and 37194 transitions. [2022-11-02 20:06:01,756 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8342 [2022-11-02 20:06:01,806 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20441 states to 20441 states and 37194 transitions. [2022-11-02 20:06:01,806 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20403 [2022-11-02 20:06:01,820 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20403 [2022-11-02 20:06:01,821 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20441 states and 37194 transitions. [2022-11-02 20:06:01,821 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:06:01,821 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20441 states and 37194 transitions. [2022-11-02 20:06:01,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20441 states and 37194 transitions. [2022-11-02 20:06:02,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20441 to 13055. [2022-11-02 20:06:02,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13055 states, 13055 states have (on average 1.8183837610111069) internal successors, (23739), 13054 states have internal predecessors, (23739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:02,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13055 states to 13055 states and 23739 transitions. [2022-11-02 20:06:02,364 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13055 states and 23739 transitions. [2022-11-02 20:06:02,365 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:06:02,365 INFO L428 stractBuchiCegarLoop]: Abstraction has 13055 states and 23739 transitions. [2022-11-02 20:06:02,365 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-11-02 20:06:02,366 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13055 states and 23739 transitions. [2022-11-02 20:06:02,411 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4368 [2022-11-02 20:06:02,411 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:06:02,411 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:06:02,412 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:06:02,412 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:06:02,413 INFO L748 eck$LassoCheckResult]: Stem: 819439#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 817616#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 817290#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 817291#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 814128#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 814129#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 819526#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 813823#L1917 assume !(0 == getOrigin_~person#1); 813824#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 819026#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 819718#L3097 assume !(0 == initPersonOnFloor_~floor#1); 819631#L3124 assume !(1 == initPersonOnFloor_~floor#1); 811595#L3151 assume !(2 == initPersonOnFloor_~floor#1); 811596#L3178 assume 3 == initPersonOnFloor_~floor#1; 817875#L3179 assume !(0 == initPersonOnFloor_~person#1); 814390#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 811732#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 817776#L2889 assume !(0 == callOnFloor_~floorID#1); 813296#L2892 assume !(1 == callOnFloor_~floorID#1); 813297#L2895 assume !(2 == callOnFloor_~floorID#1); 818080#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 819567#L2901-2 assume { :end_inline_callOnFloor } true; 818856#L3241 assume { :end_inline_initPersonOnFloor } true; 818857#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 818983#L1917-1 assume !(0 == getOrigin_~person#1); 815585#L1921-1 assume !(1 == getOrigin_~person#1); 813642#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 813643#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 818305#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 814174#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 814175#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 814642#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 814643#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 817129#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 814806#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 814807#L2889-2 assume !(0 == callOnFloor_~floorID#1); 815507#L2892-2 assume !(1 == callOnFloor_~floorID#1); 816974#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 817136#L2901-5 assume { :end_inline_callOnFloor } true; 815849#L3241-1 assume { :end_inline_initPersonOnFloor } true; 815850#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 815278#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 815279#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 819406#L2826 assume !(0 == isFloorCalling_~floorID#1); 815622#L2830 assume !(1 == isFloorCalling_~floorID#1); 815623#L2834 assume !(2 == isFloorCalling_~floorID#1); 819641#L2838 assume !(3 == isFloorCalling_~floorID#1); 812073#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 811854#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 811855#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 815007#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 815008#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 815051#L507-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 815052#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 812849#L545-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 817391#L1229-1 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 818055#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 817560#L1397 assume !(0 != timeShift_~tmp___9~2#1); 817283#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 814168#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 814169#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 818330#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 816154#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 816155#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 819219#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 819029#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 815976#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 815977#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 817927#L507-3 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 812836#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 810602#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 810603#L1156 assume !(1 == ~currentHeading~0); 810653#L1166 assume !(0 == ~currentFloorID~0); 810654#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 815001#L1172-1 assume { :end_inline_continueInDirection } true; 818640#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 813032#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 813034#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 812285#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 812286#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 817509#L1770-2 [2022-11-02 20:06:02,413 INFO L750 eck$LassoCheckResult]: Loop: 817509#L1770-2 assume !false; 813619#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 813620#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 810560#L1779-2 assume !false; 816818#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 816820#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 817509#L1770-2 [2022-11-02 20:06:02,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:02,414 INFO L85 PathProgramCache]: Analyzing trace with hash 999937445, now seen corresponding path program 1 times [2022-11-02 20:06:02,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:02,414 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1996286544] [2022-11-02 20:06:02,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:02,414 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:02,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:06:02,566 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:06:02,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:06:02,566 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1996286544] [2022-11-02 20:06:02,566 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1996286544] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:06:02,567 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:06:02,567 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:06:02,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [234026017] [2022-11-02 20:06:02,567 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:06:02,568 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:06:02,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:02,568 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 14 times [2022-11-02 20:06:02,568 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:02,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [144092886] [2022-11-02 20:06:02,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:02,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:02,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:02,573 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:06:02,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:02,578 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:06:02,597 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:06:02,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:06:02,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:06:02,598 INFO L87 Difference]: Start difference. First operand 13055 states and 23739 transitions. cyclomatic complexity: 10728 Second operand has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 5 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:08,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:06:08,092 INFO L93 Difference]: Finished difference Result 41849 states and 76695 transitions. [2022-11-02 20:06:08,092 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41849 states and 76695 transitions. [2022-11-02 20:06:08,218 INFO L131 ngComponentsAnalysis]: Automaton has 227 accepting balls. 14166 [2022-11-02 20:06:08,312 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41849 states to 41849 states and 76695 transitions. [2022-11-02 20:06:08,312 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 41697 [2022-11-02 20:06:08,337 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 41697 [2022-11-02 20:06:08,337 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41849 states and 76695 transitions. [2022-11-02 20:06:08,351 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:06:08,352 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41849 states and 76695 transitions. [2022-11-02 20:06:08,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41849 states and 76695 transitions. [2022-11-02 20:06:08,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41849 to 13045. [2022-11-02 20:06:08,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13045 states, 13045 states have (on average 1.8182445381372174) internal successors, (23719), 13044 states have internal predecessors, (23719), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:08,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13045 states to 13045 states and 23719 transitions. [2022-11-02 20:06:08,864 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13045 states and 23719 transitions. [2022-11-02 20:06:08,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-02 20:06:08,866 INFO L428 stractBuchiCegarLoop]: Abstraction has 13045 states and 23719 transitions. [2022-11-02 20:06:08,866 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-11-02 20:06:08,866 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13045 states and 23719 transitions. [2022-11-02 20:06:08,900 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4366 [2022-11-02 20:06:08,900 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:06:08,900 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:06:08,901 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:06:08,901 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:06:08,902 INFO L748 eck$LassoCheckResult]: Stem: 874757#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 872723#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 872375#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 872376#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 869098#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 869099#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 874867#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 868787#L1917 assume !(0 == getOrigin_~person#1); 868788#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 874269#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 875159#L3097 assume !(0 == initPersonOnFloor_~floor#1); 875011#L3124 assume !(1 == initPersonOnFloor_~floor#1); 866533#L3151 assume !(2 == initPersonOnFloor_~floor#1); 866534#L3178 assume 3 == initPersonOnFloor_~floor#1; 872996#L3179 assume !(0 == initPersonOnFloor_~person#1); 869363#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 866668#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 872892#L2889 assume !(0 == callOnFloor_~floorID#1); 868246#L2892 assume !(1 == callOnFloor_~floorID#1); 868247#L2895 assume !(2 == callOnFloor_~floorID#1); 873216#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 874919#L2901-2 assume { :end_inline_callOnFloor } true; 874075#L3241 assume { :end_inline_initPersonOnFloor } true; 874076#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 874223#L1917-1 assume !(0 == getOrigin_~person#1); 870592#L1921-1 assume !(1 == getOrigin_~person#1); 868602#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 868603#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 873459#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 869145#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 869146#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 869621#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 869622#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 872199#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 869791#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 869792#L2889-2 assume !(0 == callOnFloor_~floorID#1); 870511#L2892-2 assume !(1 == callOnFloor_~floorID#1); 872036#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 872206#L2901-5 assume { :end_inline_callOnFloor } true; 870866#L3241-1 assume { :end_inline_initPersonOnFloor } true; 870867#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 870276#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 870277#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 874717#L2826 assume !(0 == isFloorCalling_~floorID#1); 870630#L2830 assume !(1 == isFloorCalling_~floorID#1); 870631#L2834 assume !(2 == isFloorCalling_~floorID#1); 875030#L2838 assume !(3 == isFloorCalling_~floorID#1); 867010#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 866790#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 866791#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 869995#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 869996#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 870042#L507-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 870043#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 867793#L545-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 872476#L1229-1 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 873191#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 872660#L1397 assume !(0 != timeShift_~tmp___9~2#1); 872368#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 869141#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 869142#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 873485#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 871184#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 871185#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 874487#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 874272#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 870997#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 870998#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 873052#L1121 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~11#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 868572#L1142 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 872772#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 873360#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 874050#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 865842#L1033-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 868780#L1083 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 867780#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 865538#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 865539#L1156 assume !(1 == ~currentHeading~0); 865589#L1166 assume !(0 == ~currentFloorID~0); 865590#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 869989#L1172-1 assume { :end_inline_continueInDirection } true; 873836#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 867976#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 867978#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 867225#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 867226#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 872605#L1770-2 [2022-11-02 20:06:08,902 INFO L750 eck$LassoCheckResult]: Loop: 872605#L1770-2 assume !false; 868578#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 868579#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 865499#L1779-2 assume !false; 871870#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 871872#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 872605#L1770-2 [2022-11-02 20:06:08,903 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:08,903 INFO L85 PathProgramCache]: Analyzing trace with hash 725878327, now seen corresponding path program 1 times [2022-11-02 20:06:08,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:08,903 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1538854018] [2022-11-02 20:06:08,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:08,904 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:08,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:06:08,963 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:06:08,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:06:08,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1538854018] [2022-11-02 20:06:08,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1538854018] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:06:08,964 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:06:08,964 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 20:06:08,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [169232831] [2022-11-02 20:06:08,965 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:06:08,965 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:06:08,965 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:08,965 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 15 times [2022-11-02 20:06:08,966 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:08,966 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [792453912] [2022-11-02 20:06:08,966 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:08,966 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:08,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:08,969 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:06:08,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:08,972 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:06:08,996 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:06:08,996 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:06:08,996 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:06:08,996 INFO L87 Difference]: Start difference. First operand 13045 states and 23719 transitions. cyclomatic complexity: 10718 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 2 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:09,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:06:09,653 INFO L93 Difference]: Finished difference Result 24840 states and 45050 transitions. [2022-11-02 20:06:09,653 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24840 states and 45050 transitions. [2022-11-02 20:06:09,736 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 8610 [2022-11-02 20:06:09,802 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24840 states to 24840 states and 45050 transitions. [2022-11-02 20:06:09,802 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24766 [2022-11-02 20:06:09,818 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24766 [2022-11-02 20:06:09,818 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24840 states and 45050 transitions. [2022-11-02 20:06:09,818 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:06:09,818 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24840 states and 45050 transitions. [2022-11-02 20:06:09,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24840 states and 45050 transitions. [2022-11-02 20:06:10,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24840 to 24838. [2022-11-02 20:06:10,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24838 states, 24838 states have (on average 1.8136725984378774) internal successors, (45048), 24837 states have internal predecessors, (45048), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:10,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24838 states to 24838 states and 45048 transitions. [2022-11-02 20:06:10,076 INFO L240 hiAutomatonCegarLoop]: Abstraction has 24838 states and 45048 transitions. [2022-11-02 20:06:10,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:06:10,077 INFO L428 stractBuchiCegarLoop]: Abstraction has 24838 states and 45048 transitions. [2022-11-02 20:06:10,077 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-11-02 20:06:10,077 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24838 states and 45048 transitions. [2022-11-02 20:06:10,272 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 8610 [2022-11-02 20:06:10,272 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:06:10,272 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:06:10,273 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:06:10,273 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:06:10,274 INFO L748 eck$LassoCheckResult]: Stem: 912676#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 910613#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 910258#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 910259#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 906983#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 906984#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 912798#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 906674#L1917 assume !(0 == getOrigin_~person#1); 906675#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 912161#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 913076#L3097 assume !(0 == initPersonOnFloor_~floor#1); 912930#L3124 assume !(1 == initPersonOnFloor_~floor#1); 904419#L3151 assume !(2 == initPersonOnFloor_~floor#1); 904420#L3178 assume 3 == initPersonOnFloor_~floor#1; 910890#L3179 assume !(0 == initPersonOnFloor_~person#1); 907247#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 904556#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 910784#L2889 assume !(0 == callOnFloor_~floorID#1); 906139#L2892 assume !(1 == callOnFloor_~floorID#1); 906140#L2895 assume !(2 == callOnFloor_~floorID#1); 911111#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 912850#L2901-2 assume { :end_inline_callOnFloor } true; 911966#L3241 assume { :end_inline_initPersonOnFloor } true; 911967#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 912115#L1917-1 assume !(0 == getOrigin_~person#1); 908489#L1921-1 assume !(1 == getOrigin_~person#1); 906489#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 906490#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 911356#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 907029#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 907030#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 907503#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 907504#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 910082#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 907670#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 907671#L2889-2 assume !(0 == callOnFloor_~floorID#1); 908406#L2892-2 assume !(1 == callOnFloor_~floorID#1); 909921#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 910089#L2901-5 assume { :end_inline_callOnFloor } true; 908759#L3241-1 assume { :end_inline_initPersonOnFloor } true; 908760#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 908169#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 908170#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 912629#L2826 assume !(0 == isFloorCalling_~floorID#1); 908527#L2830 assume !(1 == isFloorCalling_~floorID#1); 908528#L2834 assume !(2 == isFloorCalling_~floorID#1); 912945#L2838 assume !(3 == isFloorCalling_~floorID#1); 904900#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 904679#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 904680#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 907875#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 907876#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 907926#L507-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 907927#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 905685#L545-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 910367#L1229-1 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 911087#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 910554#L1397 assume !(0 != timeShift_~tmp___9~2#1); 910251#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 907023#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 907024#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 911382#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 909074#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 909075#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 912394#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 912164#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 908889#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 908890#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 910945#L1121 assume !(0 != ~floorButtons_0~0); 912932#L1125 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~11#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 906460#L1142 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 910663#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 911253#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 911941#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 903731#L1033-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 906667#L1083 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 905672#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 903427#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 903428#L1156 assume !(1 == ~currentHeading~0); 903477#L1166 assume !(0 == ~currentFloorID~0); 903478#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 907869#L1172-1 assume { :end_inline_continueInDirection } true; 911724#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 905869#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 905871#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 905115#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 905116#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 910501#L1770-2 [2022-11-02 20:06:10,274 INFO L750 eck$LassoCheckResult]: Loop: 910501#L1770-2 assume !false; 906466#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 906467#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 903386#L1779-2 assume !false; 909758#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 909760#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 910501#L1770-2 [2022-11-02 20:06:10,275 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:10,275 INFO L85 PathProgramCache]: Analyzing trace with hash -889968932, now seen corresponding path program 1 times [2022-11-02 20:06:10,275 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:10,275 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354424505] [2022-11-02 20:06:10,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:10,276 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:10,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:06:10,332 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:06:10,332 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:06:10,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1354424505] [2022-11-02 20:06:10,333 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1354424505] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:06:10,333 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:06:10,333 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 20:06:10,333 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [633543931] [2022-11-02 20:06:10,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:06:10,334 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:06:10,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:10,334 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 16 times [2022-11-02 20:06:10,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:10,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [28353347] [2022-11-02 20:06:10,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:10,335 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:10,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:10,338 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:06:10,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:10,341 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:06:10,358 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:06:10,359 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:06:10,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:06:10,359 INFO L87 Difference]: Start difference. First operand 24838 states and 45048 transitions. cyclomatic complexity: 20296 Second operand has 3 states, 3 states have (on average 29.0) internal successors, (87), 2 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:11,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:06:11,129 INFO L93 Difference]: Finished difference Result 48344 states and 87439 transitions. [2022-11-02 20:06:11,129 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48344 states and 87439 transitions. [2022-11-02 20:06:11,343 INFO L131 ngComponentsAnalysis]: Automaton has 162 accepting balls. 17078 [2022-11-02 20:06:11,468 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48344 states to 48344 states and 87439 transitions. [2022-11-02 20:06:11,468 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48202 [2022-11-02 20:06:11,499 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48202 [2022-11-02 20:06:11,499 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48344 states and 87439 transitions. [2022-11-02 20:06:11,500 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:06:11,500 INFO L218 hiAutomatonCegarLoop]: Abstraction has 48344 states and 87439 transitions. [2022-11-02 20:06:11,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48344 states and 87439 transitions. [2022-11-02 20:06:12,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48344 to 48340. [2022-11-02 20:06:12,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48340 states, 48340 states have (on average 1.8087505171700455) internal successors, (87435), 48339 states have internal predecessors, (87435), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:12,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48340 states to 48340 states and 87435 transitions. [2022-11-02 20:06:12,294 INFO L240 hiAutomatonCegarLoop]: Abstraction has 48340 states and 87435 transitions. [2022-11-02 20:06:12,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:06:12,295 INFO L428 stractBuchiCegarLoop]: Abstraction has 48340 states and 87435 transitions. [2022-11-02 20:06:12,295 INFO L335 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-11-02 20:06:12,295 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48340 states and 87435 transitions. [2022-11-02 20:06:12,409 INFO L131 ngComponentsAnalysis]: Automaton has 162 accepting balls. 17078 [2022-11-02 20:06:12,409 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:06:12,410 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:06:12,410 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:06:12,411 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:06:12,411 INFO L748 eck$LassoCheckResult]: Stem: 986046#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 983890#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 983525#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 983526#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 980183#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 980184#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 986177#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 979868#L1917 assume !(0 == getOrigin_~person#1); 979869#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 985488#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 986492#L3097 assume !(0 == initPersonOnFloor_~floor#1); 986325#L3124 assume !(1 == initPersonOnFloor_~floor#1); 977601#L3151 assume !(2 == initPersonOnFloor_~floor#1); 977602#L3178 assume 3 == initPersonOnFloor_~floor#1; 984171#L3179 assume !(0 == initPersonOnFloor_~person#1); 980456#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 977739#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 984065#L2889 assume !(0 == callOnFloor_~floorID#1); 979331#L2892 assume !(1 == callOnFloor_~floorID#1); 979332#L2895 assume !(2 == callOnFloor_~floorID#1); 984388#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 986232#L2901-2 assume { :end_inline_callOnFloor } true; 985282#L3241 assume { :end_inline_initPersonOnFloor } true; 985283#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 985439#L1917-1 assume !(0 == getOrigin_~person#1); 981705#L1921-1 assume !(1 == getOrigin_~person#1); 979683#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 979684#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 984645#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 980230#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 980231#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 980714#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 980715#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 983350#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 980883#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 980884#L2889-2 assume !(0 == callOnFloor_~floorID#1); 981619#L2892-2 assume !(1 == callOnFloor_~floorID#1); 983181#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 983357#L2901-5 assume { :end_inline_callOnFloor } true; 981978#L3241-1 assume { :end_inline_initPersonOnFloor } true; 981979#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 981381#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 981382#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 985990#L2826 assume !(0 == isFloorCalling_~floorID#1); 981745#L2830 assume !(1 == isFloorCalling_~floorID#1); 981746#L2834 assume !(2 == isFloorCalling_~floorID#1); 986342#L2838 assume !(3 == isFloorCalling_~floorID#1); 978087#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 977862#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 977863#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 981093#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 981094#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 981139#L507-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 981140#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 978877#L545-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 983632#L1229-1 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 984362#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 983829#L1397 assume !(0 != timeShift_~tmp___9~2#1); 983518#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 980223#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 980224#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 984670#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 982302#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 982303#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 985737#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 985491#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 982110#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 982111#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 984226#L1121 assume !(0 != ~floorButtons_0~0); 986327#L1125 assume !(0 != ~floorButtons_1~0); 984298#L1129 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~11#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 979654#L1142 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 983941#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 984537#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 985249#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 976914#L1033-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 979861#L1083 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 978864#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 976613#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 976614#L1156 assume !(1 == ~currentHeading~0); 976663#L1166 assume !(0 == ~currentFloorID~0); 976664#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 981087#L1172-1 assume { :end_inline_continueInDirection } true; 985032#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 986761#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 986762#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 986773#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 986886#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 986887#L1770-2 [2022-11-02 20:06:12,412 INFO L750 eck$LassoCheckResult]: Loop: 986887#L1770-2 assume !false; 986884#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 986885#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 986896#L1779-2 assume !false; 986894#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 986891#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 986887#L1770-2 [2022-11-02 20:06:12,412 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:12,412 INFO L85 PathProgramCache]: Analyzing trace with hash -132020878, now seen corresponding path program 1 times [2022-11-02 20:06:12,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:12,413 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1933839751] [2022-11-02 20:06:12,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:12,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:12,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:06:12,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:06:12,471 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:06:12,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1933839751] [2022-11-02 20:06:12,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1933839751] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:06:12,472 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:06:12,472 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 20:06:12,472 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [906365055] [2022-11-02 20:06:12,472 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:06:12,473 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:06:12,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:12,473 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 17 times [2022-11-02 20:06:12,473 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:12,473 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [86173320] [2022-11-02 20:06:12,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:12,474 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:12,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:12,477 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:06:12,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:12,480 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:06:12,498 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:06:12,498 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:06:12,498 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:06:12,499 INFO L87 Difference]: Start difference. First operand 48340 states and 87435 transitions. cyclomatic complexity: 39265 Second operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 2 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:13,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:06:13,446 INFO L93 Difference]: Finished difference Result 95156 states and 171607 transitions. [2022-11-02 20:06:13,446 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 95156 states and 171607 transitions. [2022-11-02 20:06:14,405 INFO L131 ngComponentsAnalysis]: Automaton has 322 accepting balls. 33954 [2022-11-02 20:06:14,697 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 95156 states to 95156 states and 171607 transitions. [2022-11-02 20:06:14,697 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 94882 [2022-11-02 20:06:14,761 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 94882 [2022-11-02 20:06:14,761 INFO L73 IsDeterministic]: Start isDeterministic. Operand 95156 states and 171607 transitions. [2022-11-02 20:06:14,812 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:06:14,812 INFO L218 hiAutomatonCegarLoop]: Abstraction has 95156 states and 171607 transitions. [2022-11-02 20:06:14,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95156 states and 171607 transitions. [2022-11-02 20:06:15,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95156 to 95148. [2022-11-02 20:06:16,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95148 states, 95148 states have (on average 1.8034956068440744) internal successors, (171599), 95147 states have internal predecessors, (171599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:16,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95148 states to 95148 states and 171599 transitions. [2022-11-02 20:06:16,191 INFO L240 hiAutomatonCegarLoop]: Abstraction has 95148 states and 171599 transitions. [2022-11-02 20:06:16,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:06:16,192 INFO L428 stractBuchiCegarLoop]: Abstraction has 95148 states and 171599 transitions. [2022-11-02 20:06:16,193 INFO L335 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-11-02 20:06:16,193 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 95148 states and 171599 transitions. [2022-11-02 20:06:16,431 INFO L131 ngComponentsAnalysis]: Automaton has 322 accepting balls. 33954 [2022-11-02 20:06:16,431 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-02 20:06:16,431 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-02 20:06:16,432 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:06:16,432 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-02 20:06:16,432 INFO L748 eck$LassoCheckResult]: Stem: 1129605#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1127421#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1127058#L2731 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1127059#L2724 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 1123684#L2739 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 1123685#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1129717#L2303 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1123371#L1917 assume !(0 == getOrigin_~person#1); 1123372#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 1129052#L1942 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1130056#L3097 assume !(0 == initPersonOnFloor_~floor#1); 1129881#L3124 assume !(1 == initPersonOnFloor_~floor#1); 1121103#L3151 assume !(2 == initPersonOnFloor_~floor#1); 1121104#L3178 assume 3 == initPersonOnFloor_~floor#1; 1127706#L3179 assume !(0 == initPersonOnFloor_~person#1); 1123959#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1121238#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1127596#L2889 assume !(0 == callOnFloor_~floorID#1); 1122836#L2892 assume !(1 == callOnFloor_~floorID#1); 1122837#L2895 assume !(2 == callOnFloor_~floorID#1); 1127935#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1129789#L2901-2 assume { :end_inline_callOnFloor } true; 1128834#L3241 assume { :end_inline_initPersonOnFloor } true; 1128835#L2064 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1129002#L1917-1 assume !(0 == getOrigin_~person#1); 1125224#L1921-1 assume !(1 == getOrigin_~person#1); 1123187#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 1123188#L1942-1 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1128196#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 1123729#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 1123730#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 1124221#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 1124222#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 1126877#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1124396#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1124397#L2889-2 assume !(0 == callOnFloor_~floorID#1); 1125140#L2892-2 assume !(1 == callOnFloor_~floorID#1); 1126708#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1126884#L2901-5 assume { :end_inline_callOnFloor } true; 1125496#L3241-1 assume { :end_inline_initPersonOnFloor } true; 1125497#L2075 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 1124899#L559 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 1124900#L90 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1129550#L2826 assume !(0 == isFloorCalling_~floorID#1); 1125265#L2830 assume !(1 == isFloorCalling_~floorID#1); 1125266#L2834 assume !(2 == isFloorCalling_~floorID#1); 1129903#L2838 assume !(3 == isFloorCalling_~floorID#1); 1121591#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1121360#L2853 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 1121361#L1860 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1124603#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1124604#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1124655#L507-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1124656#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1122377#L545-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 1127165#L1229-1 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 1127908#L1261 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1127360#L1397 assume !(0 != timeShift_~tmp___9~2#1); 1127050#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 1123725#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1123726#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 1128225#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 1125826#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 1125827#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 1129299#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1129056#L2853-3 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 1125628#L1860-1 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 1125629#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 1127763#L1121 assume !(0 != ~floorButtons_0~0); 1129883#L1125 assume !(0 != ~floorButtons_1~0); 1127839#L1129 assume !(0 != ~floorButtons_2~0); 1127635#L1133 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~11#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 1123156#L1142 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 1127473#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1128093#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1128804#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 1120412#L1033-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 1123367#L1083 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1122364#L1112 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 1120111#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1120112#L1156 assume !(1 == ~currentHeading~0); 1120162#L1166 assume !(0 == ~currentFloorID~0); 1120163#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1124597#L1172-1 assume { :end_inline_continueInDirection } true; 1128586#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1122566#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1122568#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1121804#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 1121805#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1134949#L1770-2 [2022-11-02 20:06:16,433 INFO L750 eck$LassoCheckResult]: Loop: 1134949#L1770-2 assume !false; 1134947#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1134946#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1134943#L1779-2 assume !false; 1134940#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1134941#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1134949#L1770-2 [2022-11-02 20:06:16,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:16,433 INFO L85 PathProgramCache]: Analyzing trace with hash 1199137847, now seen corresponding path program 1 times [2022-11-02 20:06:16,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:16,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1434333440] [2022-11-02 20:06:16,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:16,434 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:16,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:06:16,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:06:16,531 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:06:16,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1434333440] [2022-11-02 20:06:16,531 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1434333440] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:06:16,531 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:06:16,532 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 20:06:16,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1339542424] [2022-11-02 20:06:16,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:06:16,532 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-02 20:06:16,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:06:16,533 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 18 times [2022-11-02 20:06:16,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:06:16,533 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1835637838] [2022-11-02 20:06:16,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:06:16,534 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:06:16,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:16,541 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-02 20:06:16,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-02 20:06:16,546 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-02 20:06:16,569 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:06:16,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:06:16,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:06:16,570 INFO L87 Difference]: Start difference. First operand 95148 states and 171599 transitions. cyclomatic complexity: 76789 Second operand has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 2 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:06:18,463 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:06:18,463 INFO L93 Difference]: Finished difference Result 188360 states and 338655 transitions. [2022-11-02 20:06:18,463 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 188360 states and 338655 transitions. [2022-11-02 20:06:19,856 INFO L131 ngComponentsAnalysis]: Automaton has 642 accepting balls. 67566 [2022-11-02 20:06:20,377 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 188360 states to 188360 states and 338655 transitions. [2022-11-02 20:06:20,377 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 187830 [2022-11-02 20:06:20,506 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 187830 [2022-11-02 20:06:20,507 INFO L73 IsDeterministic]: Start isDeterministic. Operand 188360 states and 338655 transitions. [2022-11-02 20:06:20,561 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-02 20:06:20,561 INFO L218 hiAutomatonCegarLoop]: Abstraction has 188360 states and 338655 transitions. [2022-11-02 20:06:20,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188360 states and 338655 transitions.