./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2e77838346608929bef5ad1e655ea0710d74ebb9f10b29169ab985d305812d92 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 11:59:50,105 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 11:59:50,107 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 11:59:50,128 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 11:59:50,129 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 11:59:50,130 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 11:59:50,131 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 11:59:50,133 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 11:59:50,135 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 11:59:50,136 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 11:59:50,137 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 11:59:50,138 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 11:59:50,138 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 11:59:50,139 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 11:59:50,141 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 11:59:50,142 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 11:59:50,143 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 11:59:50,144 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 11:59:50,146 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 11:59:50,148 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 11:59:50,149 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 11:59:50,151 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 11:59:50,152 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 11:59:50,153 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 11:59:50,157 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 11:59:50,157 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 11:59:50,158 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 11:59:50,159 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 11:59:50,159 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 11:59:50,160 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 11:59:50,160 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 11:59:50,161 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 11:59:50,162 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 11:59:50,163 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 11:59:50,164 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 11:59:50,165 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 11:59:50,166 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 11:59:50,166 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 11:59:50,166 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 11:59:50,167 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 11:59:50,168 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 11:59:50,169 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-11-20 11:59:50,213 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 11:59:50,213 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 11:59:50,213 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 11:59:50,213 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 11:59:50,214 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 11:59:50,215 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 11:59:50,215 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 11:59:50,215 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-11-20 11:59:50,215 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-11-20 11:59:50,216 INFO L138 SettingsManager]: * Use old map elimination=false [2022-11-20 11:59:50,216 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-11-20 11:59:50,216 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-11-20 11:59:50,216 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-11-20 11:59:50,216 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 11:59:50,217 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 11:59:50,217 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-20 11:59:50,217 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 11:59:50,217 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 11:59:50,217 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 11:59:50,218 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-11-20 11:59:50,218 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-11-20 11:59:50,218 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-11-20 11:59:50,218 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 11:59:50,218 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 11:59:50,223 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-11-20 11:59:50,224 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 11:59:50,224 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-11-20 11:59:50,224 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 11:59:50,225 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 11:59:50,225 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 11:59:50,225 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 11:59:50,227 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-11-20 11:59:50,227 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2e77838346608929bef5ad1e655ea0710d74ebb9f10b29169ab985d305812d92 [2022-11-20 11:59:50,504 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 11:59:50,544 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 11:59:50,547 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 11:59:50,548 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 11:59:50,562 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 11:59:50,564 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c [2022-11-20 11:59:53,690 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 11:59:54,148 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 11:59:54,151 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c [2022-11-20 11:59:54,178 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/data/9e9dfb732/114ddcae26c64a49be16b85d51eff03e/FLAG6b588f4b6 [2022-11-20 11:59:54,204 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/data/9e9dfb732/114ddcae26c64a49be16b85d51eff03e [2022-11-20 11:59:54,210 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 11:59:54,212 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 11:59:54,214 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 11:59:54,214 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 11:59:54,218 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 11:59:54,219 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 11:59:54" (1/1) ... [2022-11-20 11:59:54,220 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3d48d5d7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:54, skipping insertion in model container [2022-11-20 11:59:54,221 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 11:59:54" (1/1) ... [2022-11-20 11:59:54,229 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 11:59:54,308 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 11:59:54,506 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c[1546,1559] [2022-11-20 11:59:54,855 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 11:59:54,880 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 11:59:54,899 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/sv-benchmarks/c/product-lines/elevator_spec13_product31.cil.c[1546,1559] [2022-11-20 11:59:55,070 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 11:59:55,096 INFO L208 MainTranslator]: Completed translation [2022-11-20 11:59:55,097 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55 WrapperNode [2022-11-20 11:59:55,097 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 11:59:55,123 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 11:59:55,123 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 11:59:55,124 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 11:59:55,132 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:55,203 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:55,773 INFO L138 Inliner]: procedures = 95, calls = 348, calls flagged for inlining = 201, calls inlined = 1065, statements flattened = 36562 [2022-11-20 11:59:55,773 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 11:59:55,774 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 11:59:55,774 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 11:59:55,774 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 11:59:55,785 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:55,786 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:55,887 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:55,888 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:56,212 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:56,659 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:56,721 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:56,795 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:56,937 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 11:59:56,939 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 11:59:56,940 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 11:59:56,941 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 11:59:56,942 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (1/1) ... [2022-11-20 11:59:56,950 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 11:59:56,962 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:59:56,983 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-20 11:59:57,012 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-11-20 11:59:57,033 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 11:59:57,033 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 11:59:57,034 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 11:59:57,035 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 11:59:57,282 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 11:59:57,285 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 12:00:12,741 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 12:00:12,795 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 12:00:12,795 INFO L300 CfgBuilder]: Removed 61 assume(true) statements. [2022-11-20 12:00:12,805 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:00:12 BoogieIcfgContainer [2022-11-20 12:00:12,806 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 12:00:12,807 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-11-20 12:00:12,807 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-11-20 12:00:12,811 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-11-20 12:00:12,812 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-20 12:00:12,812 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 20.11 11:59:54" (1/3) ... [2022-11-20 12:00:12,813 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@35ed5fe0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 20.11 12:00:12, skipping insertion in model container [2022-11-20 12:00:12,813 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-20 12:00:12,814 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:59:55" (2/3) ... [2022-11-20 12:00:12,814 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@35ed5fe0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 20.11 12:00:12, skipping insertion in model container [2022-11-20 12:00:12,814 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-20 12:00:12,814 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:00:12" (3/3) ... [2022-11-20 12:00:12,816 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product31.cil.c [2022-11-20 12:00:12,984 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-11-20 12:00:12,984 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-11-20 12:00:12,984 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-11-20 12:00:12,984 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-11-20 12:00:12,984 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-11-20 12:00:12,984 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-11-20 12:00:12,984 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-11-20 12:00:12,985 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-11-20 12:00:13,016 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9727 states, 9726 states have (on average 1.8738433066008637) internal successors, (18225), 9726 states have internal predecessors, (18225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:13,199 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2431 [2022-11-20 12:00:13,200 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:13,200 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:13,209 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:13,209 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:13,209 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-11-20 12:00:13,232 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9727 states, 9726 states have (on average 1.8738433066008637) internal successors, (18225), 9726 states have internal predecessors, (18225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:13,365 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2431 [2022-11-20 12:00:13,365 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:13,365 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:13,371 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:13,371 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:13,393 INFO L748 eck$LassoCheckResult]: Stem: 7899#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 4674#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 8726#L1702true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7737#L1695true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 6127#L1710true main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 2914#L1651true assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 6189#L1624true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 5437#L564true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 5579#L589true aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1173#L999true assume 0 == initPersonOnFloor_~floor#1; 4586#L1000true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7843#L1107-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 323#L791true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1193#L803-2true assume { :end_inline_callOnFloor } true; 6762#L1143true assume { :end_inline_initPersonOnFloor } true; 7061#L1380true assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 5024#L564-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 8022#L589-1true angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3825#L999-1true assume 0 == initPersonOnFloor_~floor#1; 9452#L1000-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3378#L1107-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 8364#L791-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 8214#L803-5true assume { :end_inline_callOnFloor } true; 5067#L1143-1true assume { :end_inline_initPersonOnFloor } true; 1732#L1391true assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 3512#L2015true __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 467#L436true assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 9179#L728true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 603#L755true isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 3136#L3316true stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 4875#L2700true assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2990#L1963true stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 2705#L2704true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 867#L2717true timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 585#L2853true assume !(0 != timeShift_~tmp___9~2#1); 3155#L2944true assume 1 == ~doorState~0;~doorState~0 := 0; 899#L2944-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 8468#L728-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 8591#L755-3true isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 2753#L3316-1true stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 407#L2555true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 4924#L1963-3true stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 288#L2568true timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 207#L2952true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 8803#L2612true assume !(1 == ~currentHeading~0); 2636#L2622true assume !(0 == ~currentFloorID~0); 3833#L2622-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2494#L2628-1true assume { :end_inline_continueInDirection } true; 10#L2961-2true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 1813#L454true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 1043#L455true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2126#L3156true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~1#1 := 0;existInLiftCallsInDirection_~i~1#1 := 1 + ~currentFloorID~0; 5265#L3160-2true [2022-11-20 12:00:13,393 INFO L750 eck$LassoCheckResult]: Loop: 5265#L3160-2true assume !false; 3478#L3161true assume existInLiftCallsInDirection_~i~1#1 < 5; 4#L3162true assume !(0 == existInLiftCallsInDirection_~i~1#1); 3719#L3175true assume !(1 == existInLiftCallsInDirection_~i~1#1); 4621#L3184true assume !(2 == existInLiftCallsInDirection_~i~1#1); 3138#L3193true assume !(3 == existInLiftCallsInDirection_~i~1#1); 5255#L3202true assume !(4 == existInLiftCallsInDirection_~i~1#1); 1635#L3203-1true existInLiftCallsInDirection_~i~1#1 := 1 + existInLiftCallsInDirection_~i~1#1; 5265#L3160-2true [2022-11-20 12:00:13,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:13,404 INFO L85 PathProgramCache]: Analyzing trace with hash 1456644332, now seen corresponding path program 1 times [2022-11-20 12:00:13,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:13,414 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1727729674] [2022-11-20 12:00:13,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:13,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:13,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:14,153 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:14,153 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:14,154 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1727729674] [2022-11-20 12:00:14,155 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1727729674] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:14,156 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:14,156 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:00:14,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [917786090] [2022-11-20 12:00:14,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:14,163 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:14,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:14,165 INFO L85 PathProgramCache]: Analyzing trace with hash -462995331, now seen corresponding path program 1 times [2022-11-20 12:00:14,165 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:14,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [344100186] [2022-11-20 12:00:14,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:14,166 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:14,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:14,186 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:14,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:14,214 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:14,279 INFO L210 LassoAnalysis]: Preferences: [2022-11-20 12:00:14,280 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-20 12:00:14,280 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-20 12:00:14,280 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-20 12:00:14,281 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-11-20 12:00:14,281 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:14,281 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-20 12:00:14,281 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-20 12:00:14,281 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration1_Loop [2022-11-20 12:00:14,281 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-20 12:00:14,282 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-20 12:00:14,303 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-20 12:00:14,425 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-20 12:00:14,426 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-11-20 12:00:14,428 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:14,430 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:00:14,447 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-20 12:00:14,457 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-20 12:00:14,457 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-20 12:00:14,471 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-11-20 12:00:14,503 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-11-20 12:00:14,503 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:14,503 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:00:14,505 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-20 12:00:14,508 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-11-20 12:00:14,509 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-11-20 12:00:14,509 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-20 12:00:14,534 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-11-20 12:00:14,539 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-11-20 12:00:14,540 INFO L210 LassoAnalysis]: Preferences: [2022-11-20 12:00:14,540 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-20 12:00:14,540 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-20 12:00:14,540 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-20 12:00:14,540 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-11-20 12:00:14,540 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:14,540 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-20 12:00:14,541 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-20 12:00:14,541 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration1_Loop [2022-11-20 12:00:14,541 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-20 12:00:14,541 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-20 12:00:14,542 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-20 12:00:14,627 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-20 12:00:14,631 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-11-20 12:00:14,632 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:14,632 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:00:14,636 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-20 12:00:14,648 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-11-20 12:00:14,648 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-20 12:00:14,661 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-20 12:00:14,661 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-20 12:00:14,662 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-20 12:00:14,662 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-20 12:00:14,662 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-20 12:00:14,667 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-20 12:00:14,668 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-20 12:00:14,678 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-11-20 12:00:14,685 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2022-11-20 12:00:14,685 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2022-11-20 12:00:14,687 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:14,687 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:00:14,714 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-20 12:00:14,716 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-11-20 12:00:14,716 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-11-20 12:00:14,716 INFO L513 LassoAnalysis]: Proved termination. [2022-11-20 12:00:14,717 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~1#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~1#1 Supporting invariants [] [2022-11-20 12:00:14,726 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-11-20 12:00:14,727 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2022-11-20 12:00:14,730 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-11-20 12:00:14,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:14,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:14,939 INFO L263 TraceCheckSpWp]: Trace formula consists of 623 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-20 12:00:14,941 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:00:15,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:15,070 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-20 12:00:15,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:00:15,284 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:15,336 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2022-11-20 12:00:15,367 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 9727 states, 9726 states have (on average 1.8738433066008637) internal successors, (18225), 9726 states have internal predecessors, (18225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:16,517 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2022-11-20 12:00:23,194 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 9727 states, 9726 states have (on average 1.8738433066008637) internal successors, (18225), 9726 states have internal predecessors, (18225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 110945 states and 207693 transitions. Complement of second has 18 states. [2022-11-20 12:00:23,198 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2022-11-20 12:00:23,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:23,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 112967 transitions. [2022-11-20 12:00:23,346 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 112967 transitions. Stem has 52 letters. Loop has 8 letters. [2022-11-20 12:00:23,348 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-20 12:00:23,348 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 112967 transitions. Stem has 60 letters. Loop has 8 letters. [2022-11-20 12:00:23,349 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-20 12:00:23,349 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 112967 transitions. Stem has 52 letters. Loop has 16 letters. [2022-11-20 12:00:23,350 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-20 12:00:23,351 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 110945 states and 207693 transitions. [2022-11-20 12:00:24,395 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15600 [2022-11-20 12:00:24,773 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 110945 states to 60222 states and 112690 transitions. [2022-11-20 12:00:24,774 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60192 [2022-11-20 12:00:24,846 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60193 [2022-11-20 12:00:24,847 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60222 states and 112690 transitions. [2022-11-20 12:00:24,854 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:24,855 INFO L218 hiAutomatonCegarLoop]: Abstraction has 60222 states and 112690 transitions. [2022-11-20 12:00:24,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60222 states and 112690 transitions. [2022-11-20 12:00:25,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60222 to 17477. [2022-11-20 12:00:25,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17477 states, 17477 states have (on average 1.866739142873491) internal successors, (32625), 17476 states have internal predecessors, (32625), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:25,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17477 states to 17477 states and 32625 transitions. [2022-11-20 12:00:25,623 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17477 states and 32625 transitions. [2022-11-20 12:00:25,850 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:25,853 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:00:25,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:00:25,856 INFO L87 Difference]: Start difference. First operand 17477 states and 32625 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:26,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:26,568 INFO L93 Difference]: Finished difference Result 25252 states and 46989 transitions. [2022-11-20 12:00:26,568 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25252 states and 46989 transitions. [2022-11-20 12:00:26,913 INFO L131 ngComponentsAnalysis]: Automaton has 78 accepting balls. 8902 [2022-11-20 12:00:27,034 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25252 states to 25239 states and 46976 transitions. [2022-11-20 12:00:27,034 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25220 [2022-11-20 12:00:27,065 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25220 [2022-11-20 12:00:27,065 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25239 states and 46976 transitions. [2022-11-20 12:00:27,066 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:27,067 INFO L218 hiAutomatonCegarLoop]: Abstraction has 25239 states and 46976 transitions. [2022-11-20 12:00:27,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25239 states and 46976 transitions. [2022-11-20 12:00:27,268 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25239 to 9724. [2022-11-20 12:00:27,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9724 states, 9724 states have (on average 1.8612710818593172) internal successors, (18099), 9723 states have internal predecessors, (18099), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:27,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9724 states to 9724 states and 18099 transitions. [2022-11-20 12:00:27,305 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9724 states and 18099 transitions. [2022-11-20 12:00:27,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:00:27,307 INFO L428 stractBuchiCegarLoop]: Abstraction has 9724 states and 18099 transitions. [2022-11-20 12:00:27,307 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-11-20 12:00:27,307 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9724 states and 18099 transitions. [2022-11-20 12:00:27,344 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2431 [2022-11-20 12:00:27,345 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:27,345 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:27,347 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:27,347 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:27,349 INFO L748 eck$LassoCheckResult]: Stem: 173073#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 171087#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 171088#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 173022#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 172229#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 169060#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 169061#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 171716#L564 assume !(0 == getOrigin_~person#1); 165679#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 163635#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 166270#L999 assume 0 == initPersonOnFloor_~floor#1; 166271#L1000 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 166079#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 164467#L791 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 164262#L803-2 assume { :end_inline_callOnFloor } true; 166307#L1143 assume { :end_inline_initPersonOnFloor } true; 172596#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 171390#L564-1 assume !(0 == getOrigin_~person#1); 166773#L568-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 166774#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 170196#L999-1 assume 0 == initPersonOnFloor_~floor#1; 170197#L1000-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 163787#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 169690#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 165911#L803-5 assume { :end_inline_callOnFloor } true; 171439#L1143-1 assume { :end_inline_initPersonOnFloor } true; 167293#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 167294#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 164798#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 164799#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 165095#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 165096#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 169370#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 169175#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 168768#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 165662#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 165051#L2853 assume !(0 != timeShift_~tmp___9~2#1); 165053#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 165730#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 165731#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 166028#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 168830#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 164656#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 164657#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 164382#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 164186#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 164187#L2612 assume !(1 == ~currentHeading~0); 168675#L2622 assume !(0 == ~currentFloorID~0); 168676#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 168474#L2628-1 assume { :end_inline_continueInDirection } true; 163660#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 163661#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 166023#L455 assume !(1 == ~prevDir~0); 166024#L481 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 167725#L3156-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~1#1 := 0;existInLiftCallsInDirection_~i~1#1 := 1 + ~currentFloorID~0; 167727#L3160-8 [2022-11-20 12:00:27,349 INFO L750 eck$LassoCheckResult]: Loop: 167727#L3160-8 assume !false; 168491#L3161-2 assume existInLiftCallsInDirection_~i~1#1 < 5; 168492#L3162-2 assume !(0 == existInLiftCallsInDirection_~i~1#1); 166423#L3175-2 assume !(1 == existInLiftCallsInDirection_~i~1#1); 165046#L3184-2 assume !(2 == existInLiftCallsInDirection_~i~1#1); 165048#L3193-2 assume !(3 == existInLiftCallsInDirection_~i~1#1); 171849#L3202-2 assume !(4 == existInLiftCallsInDirection_~i~1#1); 172982#L3203-5 existInLiftCallsInDirection_~i~1#1 := 1 + existInLiftCallsInDirection_~i~1#1; 167727#L3160-8 [2022-11-20 12:00:27,350 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:27,350 INFO L85 PathProgramCache]: Analyzing trace with hash -1563199095, now seen corresponding path program 1 times [2022-11-20 12:00:27,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:27,351 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1654288415] [2022-11-20 12:00:27,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:27,351 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:27,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:27,571 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:27,571 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:27,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1654288415] [2022-11-20 12:00:27,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1654288415] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:27,572 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:27,572 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 12:00:27,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1028656332] [2022-11-20 12:00:27,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:27,573 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:27,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:27,573 INFO L85 PathProgramCache]: Analyzing trace with hash 1614243709, now seen corresponding path program 1 times [2022-11-20 12:00:27,573 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:27,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [343091709] [2022-11-20 12:00:27,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:27,574 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:27,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:27,578 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:27,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:27,584 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:27,633 INFO L210 LassoAnalysis]: Preferences: [2022-11-20 12:00:27,633 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-20 12:00:27,633 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-20 12:00:27,633 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-20 12:00:27,634 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-11-20 12:00:27,634 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:27,634 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-20 12:00:27,634 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-20 12:00:27,634 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration2_Loop [2022-11-20 12:00:27,634 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-20 12:00:27,634 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-20 12:00:27,635 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-20 12:00:27,681 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-20 12:00:27,681 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-11-20 12:00:27,681 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:27,682 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:00:27,686 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-20 12:00:27,690 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-11-20 12:00:27,691 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-20 12:00:27,691 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-20 12:00:27,721 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2022-11-20 12:00:27,721 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:27,722 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:00:27,724 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-20 12:00:27,735 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-11-20 12:00:27,735 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-11-20 12:00:27,736 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-20 12:00:27,771 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-11-20 12:00:27,778 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-11-20 12:00:27,778 INFO L210 LassoAnalysis]: Preferences: [2022-11-20 12:00:27,778 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-20 12:00:27,778 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-20 12:00:27,778 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-20 12:00:27,778 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-11-20 12:00:27,778 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:27,778 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-20 12:00:27,779 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-20 12:00:27,779 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product31.cil.c_Iteration2_Loop [2022-11-20 12:00:27,779 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-20 12:00:27,779 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-20 12:00:27,780 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-20 12:00:27,829 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-20 12:00:27,830 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-11-20 12:00:27,830 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:27,830 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:00:27,831 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-20 12:00:27,843 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-11-20 12:00:27,844 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-20 12:00:27,857 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-20 12:00:27,857 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-20 12:00:27,857 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-20 12:00:27,857 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-20 12:00:27,858 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-20 12:00:27,859 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-20 12:00:27,859 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-20 12:00:27,868 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-11-20 12:00:27,872 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-11-20 12:00:27,872 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-11-20 12:00:27,872 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-20 12:00:27,872 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:00:27,873 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-20 12:00:27,877 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-11-20 12:00:27,878 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-11-20 12:00:27,878 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-11-20 12:00:27,878 INFO L513 LassoAnalysis]: Proved termination. [2022-11-20 12:00:27,879 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~1#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~1#1 Supporting invariants [] [2022-11-20 12:00:27,887 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-11-20 12:00:27,888 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-11-20 12:00:27,902 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:28,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:28,020 INFO L263 TraceCheckSpWp]: Trace formula consists of 626 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-20 12:00:28,022 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:00:28,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:28,344 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-20 12:00:28,345 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:00:28,370 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3288182-6eb5-4509-844e-a65afbac6c5a/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2022-11-20 12:00:28,541 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:28,542 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2022-11-20 12:00:28,542 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 9724 states and 18099 transitions. cyclomatic complexity: 8409 Second operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:34,451 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 9724 states and 18099 transitions. cyclomatic complexity: 8409. Second operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 102956 states and 192585 transitions. Complement of second has 17 states. [2022-11-20 12:00:34,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2022-11-20 12:00:34,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:34,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 98068 transitions. [2022-11-20 12:00:34,535 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 98068 transitions. Stem has 55 letters. Loop has 8 letters. [2022-11-20 12:00:34,536 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-20 12:00:34,536 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 98068 transitions. Stem has 63 letters. Loop has 8 letters. [2022-11-20 12:00:34,536 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-20 12:00:34,537 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 98068 transitions. Stem has 55 letters. Loop has 16 letters. [2022-11-20 12:00:34,537 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-20 12:00:34,537 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 102956 states and 192585 transitions. [2022-11-20 12:00:35,129 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15600 [2022-11-20 12:00:35,390 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 102956 states to 60228 states and 112597 transitions. [2022-11-20 12:00:35,390 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60179 [2022-11-20 12:00:35,447 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60180 [2022-11-20 12:00:35,448 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60228 states and 112597 transitions. [2022-11-20 12:00:35,461 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:35,462 INFO L218 hiAutomatonCegarLoop]: Abstraction has 60228 states and 112597 transitions. [2022-11-20 12:00:35,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60228 states and 112597 transitions. [2022-11-20 12:00:36,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60228 to 9748. [2022-11-20 12:00:36,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9748 states, 9748 states have (on average 1.8605867870332375) internal successors, (18137), 9747 states have internal predecessors, (18137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:36,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9748 states to 9748 states and 18137 transitions. [2022-11-20 12:00:36,149 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9748 states and 18137 transitions. [2022-11-20 12:00:36,150 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:36,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 12:00:36,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:00:36,152 INFO L87 Difference]: Start difference. First operand 9748 states and 18137 transitions. Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:37,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:37,353 INFO L93 Difference]: Finished difference Result 29027 states and 53981 transitions. [2022-11-20 12:00:37,353 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29027 states and 53981 transitions. [2022-11-20 12:00:37,520 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7305 [2022-11-20 12:00:37,637 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29027 states to 29027 states and 53981 transitions. [2022-11-20 12:00:37,637 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28913 [2022-11-20 12:00:37,664 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28913 [2022-11-20 12:00:37,664 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29027 states and 53981 transitions. [2022-11-20 12:00:37,667 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:37,667 INFO L218 hiAutomatonCegarLoop]: Abstraction has 29027 states and 53981 transitions. [2022-11-20 12:00:37,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29027 states and 53981 transitions. [2022-11-20 12:00:37,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29027 to 9763. [2022-11-20 12:00:37,933 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9763 states, 9763 states have (on average 1.8592645703165012) internal successors, (18152), 9762 states have internal predecessors, (18152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:37,964 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9763 states to 9763 states and 18152 transitions. [2022-11-20 12:00:37,964 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9763 states and 18152 transitions. [2022-11-20 12:00:37,965 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:00:37,966 INFO L428 stractBuchiCegarLoop]: Abstraction has 9763 states and 18152 transitions. [2022-11-20 12:00:37,966 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-11-20 12:00:37,966 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9763 states and 18152 transitions. [2022-11-20 12:00:38,014 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:38,014 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:38,015 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:38,017 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:38,017 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:38,018 INFO L748 eck$LassoCheckResult]: Stem: 324779#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 322790#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 322791#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 324728#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 323935#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 320759#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 320760#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 323418#L564 assume !(0 == getOrigin_~person#1); 317371#L568 assume !(1 == getOrigin_~person#1); 317373#L572 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 315324#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 323522#L999 assume 0 == initPersonOnFloor_~floor#1; 322692#L1000 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 317772#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 316156#L791 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 315951#L803-2 assume { :end_inline_callOnFloor } true; 317999#L1143 assume { :end_inline_initPersonOnFloor } true; 324302#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 323093#L564-1 assume !(0 == getOrigin_~person#1); 318467#L568-1 assume !(1 == getOrigin_~person#1); 318469#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 320637#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 325067#L999-1 assume 0 == initPersonOnFloor_~floor#1; 325055#L1000-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 315476#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 321389#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 317604#L803-5 assume { :end_inline_callOnFloor } true; 323142#L1143-1 assume { :end_inline_initPersonOnFloor } true; 318988#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 318989#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 316487#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 316488#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 316787#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 316788#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 321069#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 320874#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 320466#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 317354#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 316743#L2853 assume !(0 != timeShift_~tmp___9~2#1); 316745#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 317423#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 317424#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 317721#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 320528#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 316345#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 316346#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 316071#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 315875#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 315876#L2612 assume !(1 == ~currentHeading~0); 320373#L2622 assume !(0 == ~currentFloorID~0); 320374#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 320168#L2628-1 assume { :end_inline_continueInDirection } true; 315349#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 315350#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 317716#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 317718#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 319609#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 319161#L3226-2 [2022-11-20 12:00:38,018 INFO L750 eck$LassoCheckResult]: Loop: 319161#L3226-2 assume !false; 319927#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 319928#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 315594#L3235-2 assume !false; 315595#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 319042#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 319161#L3226-2 [2022-11-20 12:00:38,019 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:38,019 INFO L85 PathProgramCache]: Analyzing trace with hash 2016865714, now seen corresponding path program 1 times [2022-11-20 12:00:38,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:38,020 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [449161224] [2022-11-20 12:00:38,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:38,021 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:38,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:38,155 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:38,156 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:38,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [449161224] [2022-11-20 12:00:38,156 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [449161224] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:38,156 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:38,157 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 12:00:38,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1167072371] [2022-11-20 12:00:38,157 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:38,158 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:38,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:38,158 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 1 times [2022-11-20 12:00:38,158 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:38,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1542542552] [2022-11-20 12:00:38,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:38,159 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:38,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:38,164 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:38,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:38,171 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:38,207 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:38,207 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 12:00:38,208 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:00:38,208 INFO L87 Difference]: Start difference. First operand 9763 states and 18152 transitions. cyclomatic complexity: 8424 Second operand has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:38,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:38,598 INFO L93 Difference]: Finished difference Result 19347 states and 35977 transitions. [2022-11-20 12:00:38,598 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19347 states and 35977 transitions. [2022-11-20 12:00:38,692 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4870 [2022-11-20 12:00:39,003 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19347 states to 19347 states and 35977 transitions. [2022-11-20 12:00:39,004 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19271 [2022-11-20 12:00:39,019 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19271 [2022-11-20 12:00:39,019 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19347 states and 35977 transitions. [2022-11-20 12:00:39,020 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:39,020 INFO L218 hiAutomatonCegarLoop]: Abstraction has 19347 states and 35977 transitions. [2022-11-20 12:00:39,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19347 states and 35977 transitions. [2022-11-20 12:00:39,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19347 to 9729. [2022-11-20 12:00:39,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9729 states, 9729 states have (on average 1.85877274128893) internal successors, (18084), 9728 states have internal predecessors, (18084), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:39,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9729 states to 9729 states and 18084 transitions. [2022-11-20 12:00:39,207 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9729 states and 18084 transitions. [2022-11-20 12:00:39,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 12:00:39,210 INFO L428 stractBuchiCegarLoop]: Abstraction has 9729 states and 18084 transitions. [2022-11-20 12:00:39,210 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-11-20 12:00:39,211 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9729 states and 18084 transitions. [2022-11-20 12:00:39,246 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:39,246 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:39,246 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:39,250 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:39,250 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:39,251 INFO L748 eck$LassoCheckResult]: Stem: 353866#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 351879#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 351880#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 353814#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 353021#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 349855#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 349856#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 352505#L564 assume !(0 == getOrigin_~person#1); 346484#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 346485#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 347076#L999 assume !(0 == initPersonOnFloor_~floor#1); 347077#L1026 assume !(1 == initPersonOnFloor_~floor#1); 352899#L1053 assume !(2 == initPersonOnFloor_~floor#1); 353398#L1080 assume 3 == initPersonOnFloor_~floor#1; 350585#L1081 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 348417#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 345269#L791 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 345067#L803-2 assume { :end_inline_callOnFloor } true; 347111#L1143 assume { :end_inline_initPersonOnFloor } true; 353388#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 352180#L564-1 assume !(0 == getOrigin_~person#1); 347576#L568-1 assume !(1 == getOrigin_~person#1); 347578#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 349734#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 354150#L999-1 assume 0 == initPersonOnFloor_~floor#1; 354141#L1000-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 344594#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 350488#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 346716#L803-5 assume { :end_inline_callOnFloor } true; 352229#L1143-1 assume { :end_inline_initPersonOnFloor } true; 348092#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 348093#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 345600#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 345601#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 345903#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 345904#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 350164#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 349969#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 349563#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 346467#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 345860#L2853 assume !(0 != timeShift_~tmp___9~2#1); 345862#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 346535#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 346536#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 346841#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 349626#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 345458#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 345459#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 345184#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 344994#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 344995#L2612 assume !(1 == ~currentHeading~0); 349472#L2622 assume !(0 == ~currentFloorID~0); 349473#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 349270#L2628-1 assume { :end_inline_continueInDirection } true; 344462#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 344463#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 346829#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 346831#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 348712#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 348263#L3226-2 [2022-11-20 12:00:39,252 INFO L750 eck$LassoCheckResult]: Loop: 348263#L3226-2 assume !false; 349033#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 349034#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 344707#L3235-2 assume !false; 344708#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 348144#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 348263#L3226-2 [2022-11-20 12:00:39,252 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:39,253 INFO L85 PathProgramCache]: Analyzing trace with hash -461795163, now seen corresponding path program 1 times [2022-11-20 12:00:39,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:39,257 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [361942144] [2022-11-20 12:00:39,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:39,258 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:39,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:39,433 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:39,433 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:39,433 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [361942144] [2022-11-20 12:00:39,433 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [361942144] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:39,434 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:39,434 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:00:39,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [779002735] [2022-11-20 12:00:39,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:39,434 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:39,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:39,435 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 2 times [2022-11-20 12:00:39,435 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:39,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1546152558] [2022-11-20 12:00:39,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:39,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:39,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:39,441 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:39,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:39,449 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:39,480 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:39,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:00:39,482 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:00:39,482 INFO L87 Difference]: Start difference. First operand 9729 states and 18084 transitions. cyclomatic complexity: 8390 Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:39,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:39,909 INFO L93 Difference]: Finished difference Result 13583 states and 25248 transitions. [2022-11-20 12:00:39,909 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13583 states and 25248 transitions. [2022-11-20 12:00:39,951 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4502 [2022-11-20 12:00:40,003 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13583 states to 13583 states and 25248 transitions. [2022-11-20 12:00:40,003 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13545 [2022-11-20 12:00:40,015 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13545 [2022-11-20 12:00:40,016 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13583 states and 25248 transitions. [2022-11-20 12:00:40,037 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:40,038 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13583 states and 25248 transitions. [2022-11-20 12:00:40,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13583 states and 25248 transitions. [2022-11-20 12:00:40,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13583 to 9729. [2022-11-20 12:00:40,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9729 states, 9729 states have (on average 1.8581560283687943) internal successors, (18078), 9728 states have internal predecessors, (18078), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:40,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9729 states to 9729 states and 18078 transitions. [2022-11-20 12:00:40,621 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9729 states and 18078 transitions. [2022-11-20 12:00:40,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:00:40,625 INFO L428 stractBuchiCegarLoop]: Abstraction has 9729 states and 18078 transitions. [2022-11-20 12:00:40,625 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-11-20 12:00:40,625 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9729 states and 18078 transitions. [2022-11-20 12:00:40,660 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:40,660 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:40,660 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:40,661 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:40,661 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:40,661 INFO L748 eck$LassoCheckResult]: Stem: 377191#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 375204#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 375205#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 377139#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 376346#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 373180#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 373181#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 375830#L564 assume !(0 == getOrigin_~person#1); 369809#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 369810#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 370398#L999 assume !(0 == initPersonOnFloor_~floor#1); 370399#L1026 assume !(1 == initPersonOnFloor_~floor#1); 376224#L1053 assume !(2 == initPersonOnFloor_~floor#1); 376723#L1080 assume 3 == initPersonOnFloor_~floor#1; 373910#L1081 assume !(0 == initPersonOnFloor_~person#1); 373911#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 371742#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 368594#L791 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 368389#L803-2 assume { :end_inline_callOnFloor } true; 370436#L1143 assume { :end_inline_initPersonOnFloor } true; 376713#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 375505#L564-1 assume !(0 == getOrigin_~person#1); 370901#L568-1 assume !(1 == getOrigin_~person#1); 370903#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 373059#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 377475#L999-1 assume 0 == initPersonOnFloor_~floor#1; 377466#L1000-2 assume !(0 == initPersonOnFloor_~person#1); 368698#L1003-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 367914#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 373811#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 370041#L803-5 assume { :end_inline_callOnFloor } true; 375554#L1143-1 assume { :end_inline_initPersonOnFloor } true; 371415#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 371416#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 368925#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 368926#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 369225#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 369226#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 373489#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 373294#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 372888#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 369792#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 369183#L2853 assume !(0 != timeShift_~tmp___9~2#1); 369185#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 369860#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 369861#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 370163#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 372950#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 368783#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 368784#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 368509#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 368313#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 368314#L2612 assume !(1 == ~currentHeading~0); 372797#L2622 assume !(0 == ~currentFloorID~0); 372798#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 372595#L2628-1 assume { :end_inline_continueInDirection } true; 367787#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 367788#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 370154#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 370156#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 372037#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 371588#L3226-2 [2022-11-20 12:00:40,662 INFO L750 eck$LassoCheckResult]: Loop: 371588#L3226-2 assume !false; 372358#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 372359#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 368032#L3235-2 assume !false; 368033#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 371469#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 371588#L3226-2 [2022-11-20 12:00:40,662 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:40,662 INFO L85 PathProgramCache]: Analyzing trace with hash -122478231, now seen corresponding path program 1 times [2022-11-20 12:00:40,662 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:40,663 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [609093877] [2022-11-20 12:00:40,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:40,663 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:40,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:40,746 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:40,747 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:40,747 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [609093877] [2022-11-20 12:00:40,747 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [609093877] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:40,747 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:40,747 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 12:00:40,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1002776058] [2022-11-20 12:00:40,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:40,748 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:40,748 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:40,749 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 3 times [2022-11-20 12:00:40,749 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:40,749 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1564634680] [2022-11-20 12:00:40,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:40,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:40,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:40,753 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:40,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:40,757 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:40,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:40,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 12:00:40,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:00:40,778 INFO L87 Difference]: Start difference. First operand 9729 states and 18078 transitions. cyclomatic complexity: 8384 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:41,550 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:41,551 INFO L93 Difference]: Finished difference Result 28986 states and 53895 transitions. [2022-11-20 12:00:41,551 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28986 states and 53895 transitions. [2022-11-20 12:00:42,039 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7305 [2022-11-20 12:00:42,126 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28986 states to 28986 states and 53895 transitions. [2022-11-20 12:00:42,126 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28872 [2022-11-20 12:00:42,153 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28872 [2022-11-20 12:00:42,153 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28986 states and 53895 transitions. [2022-11-20 12:00:42,180 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:42,180 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28986 states and 53895 transitions. [2022-11-20 12:00:42,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28986 states and 53895 transitions. [2022-11-20 12:00:42,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28986 to 9733. [2022-11-20 12:00:42,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9733 states, 9733 states have (on average 1.8577006061851433) internal successors, (18081), 9732 states have internal predecessors, (18081), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:42,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9733 states to 9733 states and 18081 transitions. [2022-11-20 12:00:42,435 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9733 states and 18081 transitions. [2022-11-20 12:00:42,435 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:00:42,436 INFO L428 stractBuchiCegarLoop]: Abstraction has 9733 states and 18081 transitions. [2022-11-20 12:00:42,436 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-11-20 12:00:42,436 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9733 states and 18081 transitions. [2022-11-20 12:00:42,477 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:42,477 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:42,477 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:42,478 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:42,479 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:42,479 INFO L748 eck$LassoCheckResult]: Stem: 415918#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 413931#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 413932#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 415866#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 415073#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 411907#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 411908#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 414557#L564 assume !(0 == getOrigin_~person#1); 408534#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 408535#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 409123#L999 assume !(0 == initPersonOnFloor_~floor#1); 409124#L1026 assume !(1 == initPersonOnFloor_~floor#1); 414951#L1053 assume !(2 == initPersonOnFloor_~floor#1); 415450#L1080 assume 3 == initPersonOnFloor_~floor#1; 412637#L1081 assume !(0 == initPersonOnFloor_~person#1); 412638#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 410469#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 407318#L791 assume !(0 == callOnFloor_~floorID#1); 407160#L794 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 407113#L803-2 assume { :end_inline_callOnFloor } true; 409161#L1143 assume { :end_inline_initPersonOnFloor } true; 415440#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 414232#L564-1 assume !(0 == getOrigin_~person#1); 409626#L568-1 assume !(1 == getOrigin_~person#1); 409628#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 411786#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 416203#L999-1 assume 0 == initPersonOnFloor_~floor#1; 416194#L1000-2 assume !(0 == initPersonOnFloor_~person#1); 407422#L1003-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 406638#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 412538#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 408766#L803-5 assume { :end_inline_callOnFloor } true; 414281#L1143-1 assume { :end_inline_initPersonOnFloor } true; 410140#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 410141#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 407649#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 407650#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 407950#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 407951#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 412216#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 412021#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 411615#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 408517#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 407908#L2853 assume !(0 != timeShift_~tmp___9~2#1); 407910#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 408585#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 408586#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 408888#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 411677#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 407507#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 407508#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 407233#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 407037#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 407038#L2612 assume !(1 == ~currentHeading~0); 411524#L2622 assume !(0 == ~currentFloorID~0); 411525#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 411322#L2628-1 assume { :end_inline_continueInDirection } true; 406511#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 406512#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 408879#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 408881#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 410764#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 410313#L3226-2 [2022-11-20 12:00:42,480 INFO L750 eck$LassoCheckResult]: Loop: 410313#L3226-2 assume !false; 411085#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 411086#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 406756#L3235-2 assume !false; 406757#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 410194#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 410313#L3226-2 [2022-11-20 12:00:42,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:42,480 INFO L85 PathProgramCache]: Analyzing trace with hash -940719868, now seen corresponding path program 1 times [2022-11-20 12:00:42,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:42,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [982853623] [2022-11-20 12:00:42,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:42,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:42,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:42,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:42,571 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:42,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [982853623] [2022-11-20 12:00:42,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [982853623] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:42,572 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:42,572 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 12:00:42,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1991719073] [2022-11-20 12:00:42,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:42,573 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:42,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:42,573 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 4 times [2022-11-20 12:00:42,573 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:42,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1627451412] [2022-11-20 12:00:42,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:42,574 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:42,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:42,578 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:42,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:42,582 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:42,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:42,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 12:00:42,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:00:42,604 INFO L87 Difference]: Start difference. First operand 9733 states and 18081 transitions. cyclomatic complexity: 8383 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:43,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:43,535 INFO L93 Difference]: Finished difference Result 28991 states and 53897 transitions. [2022-11-20 12:00:43,535 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28991 states and 53897 transitions. [2022-11-20 12:00:43,671 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7305 [2022-11-20 12:00:43,768 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28991 states to 28991 states and 53897 transitions. [2022-11-20 12:00:43,768 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28877 [2022-11-20 12:00:43,795 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28877 [2022-11-20 12:00:43,796 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28991 states and 53897 transitions. [2022-11-20 12:00:43,798 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:43,799 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28991 states and 53897 transitions. [2022-11-20 12:00:43,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28991 states and 53897 transitions. [2022-11-20 12:00:44,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28991 to 9739. [2022-11-20 12:00:44,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9739 states, 9739 states have (on average 1.8570695143238525) internal successors, (18086), 9738 states have internal predecessors, (18086), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:44,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9739 states to 9739 states and 18086 transitions. [2022-11-20 12:00:44,127 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9739 states and 18086 transitions. [2022-11-20 12:00:44,128 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:00:44,131 INFO L428 stractBuchiCegarLoop]: Abstraction has 9739 states and 18086 transitions. [2022-11-20 12:00:44,132 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-11-20 12:00:44,132 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9739 states and 18086 transitions. [2022-11-20 12:00:44,186 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:44,187 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:44,187 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:44,188 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:44,188 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:44,189 INFO L748 eck$LassoCheckResult]: Stem: 454652#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 452665#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 452666#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 454601#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 453807#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 450641#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 450642#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 453291#L564 assume !(0 == getOrigin_~person#1); 447268#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 447269#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 447857#L999 assume !(0 == initPersonOnFloor_~floor#1); 447858#L1026 assume !(1 == initPersonOnFloor_~floor#1); 453685#L1053 assume !(2 == initPersonOnFloor_~floor#1); 454185#L1080 assume 3 == initPersonOnFloor_~floor#1; 451371#L1081 assume !(0 == initPersonOnFloor_~person#1); 451372#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 449199#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 446051#L791 assume !(0 == callOnFloor_~floorID#1); 445893#L794 assume !(1 == callOnFloor_~floorID#1); 445845#L797 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 445846#L803-2 assume { :end_inline_callOnFloor } true; 447893#L1143 assume { :end_inline_initPersonOnFloor } true; 454175#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 452966#L564-1 assume !(0 == getOrigin_~person#1); 448358#L568-1 assume !(1 == getOrigin_~person#1); 448360#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 450520#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 454939#L999-1 assume 0 == initPersonOnFloor_~floor#1; 454930#L1000-2 assume !(0 == initPersonOnFloor_~person#1); 446156#L1003-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 445371#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 454947#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 447500#L803-5 assume { :end_inline_callOnFloor } true; 453015#L1143-1 assume { :end_inline_initPersonOnFloor } true; 448875#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 448876#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 446383#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 446384#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 446684#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 446685#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 450950#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 450755#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 450349#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 447251#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 446640#L2853 assume !(0 != timeShift_~tmp___9~2#1); 446642#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 447319#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 447320#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 447617#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 450411#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 446241#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 446242#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 445966#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 445770#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 445771#L2612 assume !(1 == ~currentHeading~0); 450258#L2622 assume !(0 == ~currentFloorID~0); 450259#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 450056#L2628-1 assume { :end_inline_continueInDirection } true; 445244#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 445245#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 447612#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 447614#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 449498#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 449048#L3226-2 [2022-11-20 12:00:44,189 INFO L750 eck$LassoCheckResult]: Loop: 449048#L3226-2 assume !false; 449816#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 449817#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 445489#L3235-2 assume !false; 445490#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 448929#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 449048#L3226-2 [2022-11-20 12:00:44,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:44,190 INFO L85 PathProgramCache]: Analyzing trace with hash -1364909148, now seen corresponding path program 1 times [2022-11-20 12:00:44,190 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:44,191 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [459195659] [2022-11-20 12:00:44,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:44,191 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:44,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:44,338 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:44,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:44,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [459195659] [2022-11-20 12:00:44,339 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [459195659] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:44,339 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:44,339 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 12:00:44,340 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [31338583] [2022-11-20 12:00:44,340 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:44,340 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:44,341 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:44,341 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 5 times [2022-11-20 12:00:44,341 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:44,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1515846313] [2022-11-20 12:00:44,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:44,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:44,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:44,356 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:44,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:44,362 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:44,386 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:44,386 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 12:00:44,387 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:00:44,387 INFO L87 Difference]: Start difference. First operand 9739 states and 18086 transitions. cyclomatic complexity: 8382 Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:45,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:45,311 INFO L93 Difference]: Finished difference Result 28998 states and 53901 transitions. [2022-11-20 12:00:45,312 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28998 states and 53901 transitions. [2022-11-20 12:00:45,399 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7305 [2022-11-20 12:00:45,468 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28998 states to 28998 states and 53901 transitions. [2022-11-20 12:00:45,469 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28884 [2022-11-20 12:00:45,486 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28884 [2022-11-20 12:00:45,486 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28998 states and 53901 transitions. [2022-11-20 12:00:45,486 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:45,486 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28998 states and 53901 transitions. [2022-11-20 12:00:45,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28998 states and 53901 transitions. [2022-11-20 12:00:45,680 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28998 to 9747. [2022-11-20 12:00:45,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9747 states, 9747 states have (on average 1.8562634656817483) internal successors, (18093), 9746 states have internal predecessors, (18093), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:45,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9747 states to 9747 states and 18093 transitions. [2022-11-20 12:00:45,715 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9747 states and 18093 transitions. [2022-11-20 12:00:45,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:00:45,716 INFO L428 stractBuchiCegarLoop]: Abstraction has 9747 states and 18093 transitions. [2022-11-20 12:00:45,717 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-11-20 12:00:45,717 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9747 states and 18093 transitions. [2022-11-20 12:00:45,752 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:45,752 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:45,753 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:45,753 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:45,753 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:45,754 INFO L748 eck$LassoCheckResult]: Stem: 493403#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 491413#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 491414#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 493351#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 492555#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 489388#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 489389#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 492039#L564 assume !(0 == getOrigin_~person#1); 486013#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 486014#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 486605#L999 assume !(0 == initPersonOnFloor_~floor#1); 486606#L1026 assume !(1 == initPersonOnFloor_~floor#1); 492433#L1053 assume !(2 == initPersonOnFloor_~floor#1); 492934#L1080 assume 3 == initPersonOnFloor_~floor#1; 490119#L1081 assume !(0 == initPersonOnFloor_~person#1); 490120#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 487948#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 484796#L791 assume !(0 == callOnFloor_~floorID#1); 484638#L794 assume !(1 == callOnFloor_~floorID#1); 484594#L797 assume !(2 == callOnFloor_~floorID#1); 484595#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 486640#L803-2 assume { :end_inline_callOnFloor } true; 486641#L1143 assume { :end_inline_initPersonOnFloor } true; 492924#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 491714#L564-1 assume !(0 == getOrigin_~person#1); 487106#L568-1 assume !(1 == getOrigin_~person#1); 487108#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 489267#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 493687#L999-1 assume 0 == initPersonOnFloor_~floor#1; 493678#L1000-2 assume !(0 == initPersonOnFloor_~person#1); 484901#L1003-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 484122#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 493696#L791-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 486245#L803-5 assume { :end_inline_callOnFloor } true; 491763#L1143-1 assume { :end_inline_initPersonOnFloor } true; 487623#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 487624#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 485128#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 485129#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 485432#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 485433#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 489697#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 489502#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 489095#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 485996#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 485389#L2853 assume !(0 != timeShift_~tmp___9~2#1); 485391#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 486064#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 486065#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 486370#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 489158#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 484986#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 484987#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 484711#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 484522#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 484523#L2612 assume !(1 == ~currentHeading~0); 489004#L2622 assume !(0 == ~currentFloorID~0); 489005#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 488802#L2628-1 assume { :end_inline_continueInDirection } true; 483990#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 483991#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 486358#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 486360#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 488244#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 487794#L3226-2 [2022-11-20 12:00:45,754 INFO L750 eck$LassoCheckResult]: Loop: 487794#L3226-2 assume !false; 488565#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 488566#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 484235#L3235-2 assume !false; 484236#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 487675#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 487794#L3226-2 [2022-11-20 12:00:45,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:45,755 INFO L85 PathProgramCache]: Analyzing trace with hash 1836590047, now seen corresponding path program 1 times [2022-11-20 12:00:45,755 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:45,755 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2069268578] [2022-11-20 12:00:45,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:45,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:45,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:45,901 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:45,902 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:45,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2069268578] [2022-11-20 12:00:45,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2069268578] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:45,902 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:45,902 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:00:45,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [788321023] [2022-11-20 12:00:45,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:45,903 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:45,903 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:45,903 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 6 times [2022-11-20 12:00:45,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:45,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [870548706] [2022-11-20 12:00:45,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:45,904 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:45,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:45,910 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:45,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:45,921 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:45,941 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:45,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:00:45,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:00:45,941 INFO L87 Difference]: Start difference. First operand 9747 states and 18093 transitions. cyclomatic complexity: 8381 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:46,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:46,594 INFO L93 Difference]: Finished difference Result 21365 states and 39698 transitions. [2022-11-20 12:00:46,594 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21365 states and 39698 transitions. [2022-11-20 12:00:46,651 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8636 [2022-11-20 12:00:46,692 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21365 states to 21365 states and 39698 transitions. [2022-11-20 12:00:46,693 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21327 [2022-11-20 12:00:46,703 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21327 [2022-11-20 12:00:46,704 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21365 states and 39698 transitions. [2022-11-20 12:00:46,704 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:46,705 INFO L218 hiAutomatonCegarLoop]: Abstraction has 21365 states and 39698 transitions. [2022-11-20 12:00:46,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21365 states and 39698 transitions. [2022-11-20 12:00:46,842 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21365 to 9733. [2022-11-20 12:00:46,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9733 states, 9733 states have (on average 1.8562622007603) internal successors, (18067), 9732 states have internal predecessors, (18067), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:46,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9733 states to 9733 states and 18067 transitions. [2022-11-20 12:00:46,875 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9733 states and 18067 transitions. [2022-11-20 12:00:46,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:00:46,876 INFO L428 stractBuchiCegarLoop]: Abstraction has 9733 states and 18067 transitions. [2022-11-20 12:00:46,876 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-11-20 12:00:46,876 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9733 states and 18067 transitions. [2022-11-20 12:00:46,909 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:46,910 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:46,910 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:46,910 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:46,910 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:46,911 INFO L748 eck$LassoCheckResult]: Stem: 524519#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 522534#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 522535#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 524468#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 523677#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 520508#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 520509#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 523162#L564 assume !(0 == getOrigin_~person#1); 517138#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 517139#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 517726#L999 assume !(0 == initPersonOnFloor_~floor#1); 517727#L1026 assume !(1 == initPersonOnFloor_~floor#1); 523556#L1053 assume !(2 == initPersonOnFloor_~floor#1); 524054#L1080 assume 3 == initPersonOnFloor_~floor#1; 521238#L1081 assume !(0 == initPersonOnFloor_~person#1); 521239#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 519068#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 515922#L791 assume !(0 == callOnFloor_~floorID#1); 515764#L794 assume !(1 == callOnFloor_~floorID#1); 515717#L797 assume !(2 == callOnFloor_~floorID#1); 515718#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 517762#L803-2 assume { :end_inline_callOnFloor } true; 517763#L1143 assume { :end_inline_initPersonOnFloor } true; 524044#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 522835#L564-1 assume !(0 == getOrigin_~person#1); 518228#L568-1 assume !(1 == getOrigin_~person#1); 518229#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 524546#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 521642#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 521643#L1026-1 assume 1 == initPersonOnFloor_~floor#1; 523813#L1027-2 assume !(0 == initPersonOnFloor_~person#1); 517340#L1030-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 516256#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 524645#L791-2 assume !(0 == callOnFloor_~floorID#1); 524646#L794-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 517370#L803-5 assume { :end_inline_callOnFloor } true; 522884#L1143-1 assume { :end_inline_initPersonOnFloor } true; 518744#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 518745#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 516253#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 516254#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 516554#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 516555#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 520817#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 520622#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 520218#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 517121#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 516510#L2853 assume !(0 != timeShift_~tmp___9~2#1); 516512#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 517189#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 517190#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 517487#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 520280#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 516111#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 516112#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 515837#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 515642#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 515643#L2612 assume !(1 == ~currentHeading~0); 520127#L2622 assume !(0 == ~currentFloorID~0); 520128#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 519925#L2628-1 assume { :end_inline_continueInDirection } true; 515118#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 515119#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 517482#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 517484#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 519367#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 518917#L3226-2 [2022-11-20 12:00:46,911 INFO L750 eck$LassoCheckResult]: Loop: 518917#L3226-2 assume !false; 519685#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 519686#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 515360#L3235-2 assume !false; 515361#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 518798#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 518917#L3226-2 [2022-11-20 12:00:46,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:46,912 INFO L85 PathProgramCache]: Analyzing trace with hash -852779595, now seen corresponding path program 1 times [2022-11-20 12:00:46,912 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:46,912 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1264980904] [2022-11-20 12:00:46,912 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:46,913 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:46,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:47,034 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:47,037 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:47,037 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1264980904] [2022-11-20 12:00:47,037 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1264980904] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:47,037 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:47,038 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:00:47,038 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1341703479] [2022-11-20 12:00:47,038 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:47,040 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:47,040 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:47,040 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 7 times [2022-11-20 12:00:47,041 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:47,041 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [557896983] [2022-11-20 12:00:47,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:47,041 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:47,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:47,045 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:47,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:47,048 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:47,067 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:47,068 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:00:47,068 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:00:47,068 INFO L87 Difference]: Start difference. First operand 9733 states and 18067 transitions. cyclomatic complexity: 8369 Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:47,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:47,553 INFO L93 Difference]: Finished difference Result 21339 states and 39649 transitions. [2022-11-20 12:00:47,553 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21339 states and 39649 transitions. [2022-11-20 12:00:47,744 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8636 [2022-11-20 12:00:47,788 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21339 states to 21339 states and 39649 transitions. [2022-11-20 12:00:47,789 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21301 [2022-11-20 12:00:47,801 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21301 [2022-11-20 12:00:47,802 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21339 states and 39649 transitions. [2022-11-20 12:00:47,802 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:47,802 INFO L218 hiAutomatonCegarLoop]: Abstraction has 21339 states and 39649 transitions. [2022-11-20 12:00:47,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21339 states and 39649 transitions. [2022-11-20 12:00:47,932 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21339 to 9727. [2022-11-20 12:00:47,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9727 states, 9727 states have (on average 1.8560707309550735) internal successors, (18054), 9726 states have internal predecessors, (18054), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:47,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9727 states to 9727 states and 18054 transitions. [2022-11-20 12:00:47,956 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9727 states and 18054 transitions. [2022-11-20 12:00:47,957 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:00:47,957 INFO L428 stractBuchiCegarLoop]: Abstraction has 9727 states and 18054 transitions. [2022-11-20 12:00:47,957 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-11-20 12:00:47,957 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9727 states and 18054 transitions. [2022-11-20 12:00:47,982 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:47,982 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:47,982 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:47,983 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:47,983 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:47,983 INFO L748 eck$LassoCheckResult]: Stem: 555602#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 553617#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 553618#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 555551#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 554761#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 551590#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 551591#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 554245#L564 assume !(0 == getOrigin_~person#1); 548224#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 548225#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 548808#L999 assume !(0 == initPersonOnFloor_~floor#1); 548809#L1026 assume !(1 == initPersonOnFloor_~floor#1); 554640#L1053 assume !(2 == initPersonOnFloor_~floor#1); 555137#L1080 assume 3 == initPersonOnFloor_~floor#1; 552320#L1081 assume !(0 == initPersonOnFloor_~person#1); 552321#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 550150#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 547010#L791 assume !(0 == callOnFloor_~floorID#1); 546852#L794 assume !(1 == callOnFloor_~floorID#1); 546805#L797 assume !(2 == callOnFloor_~floorID#1); 546806#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 548844#L803-2 assume { :end_inline_callOnFloor } true; 548845#L1143 assume { :end_inline_initPersonOnFloor } true; 555127#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 553918#L564-1 assume !(0 == getOrigin_~person#1); 549310#L568-1 assume !(1 == getOrigin_~person#1); 549311#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 555629#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 552724#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 552725#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 554118#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 554119#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 554759#L1057-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 552995#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 555887#L791-2 assume !(0 == callOnFloor_~floorID#1); 555886#L794-2 assume !(1 == callOnFloor_~floorID#1); 555885#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 548452#L803-5 assume { :end_inline_callOnFloor } true; 553967#L1143-1 assume { :end_inline_initPersonOnFloor } true; 549826#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 549827#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 547341#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 547342#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 547640#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 547641#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 551899#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 551704#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 551300#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 548207#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 547596#L2853 assume !(0 != timeShift_~tmp___9~2#1); 547598#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 548273#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 548274#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 548569#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 551362#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 547199#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 547200#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 546925#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 546730#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 546731#L2612 assume !(1 == ~currentHeading~0); 551209#L2622 assume !(0 == ~currentFloorID~0); 551210#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 551007#L2628-1 assume { :end_inline_continueInDirection } true; 546206#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 546207#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 548564#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 548566#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 550449#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 549999#L3226-2 [2022-11-20 12:00:47,983 INFO L750 eck$LassoCheckResult]: Loop: 549999#L3226-2 assume !false; 550767#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 550768#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 546448#L3235-2 assume !false; 546449#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 549880#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 549999#L3226-2 [2022-11-20 12:00:47,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:47,984 INFO L85 PathProgramCache]: Analyzing trace with hash -1018003050, now seen corresponding path program 1 times [2022-11-20 12:00:47,984 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:47,984 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [127364034] [2022-11-20 12:00:47,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:47,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:48,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:48,104 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:48,104 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:48,104 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [127364034] [2022-11-20 12:00:48,104 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [127364034] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:48,105 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:48,105 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 12:00:48,105 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [116668343] [2022-11-20 12:00:48,105 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:48,107 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:48,107 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:48,107 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 8 times [2022-11-20 12:00:48,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:48,108 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [857273090] [2022-11-20 12:00:48,108 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:48,109 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:48,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:48,113 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:48,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:48,117 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:48,140 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:48,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 12:00:48,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:00:48,141 INFO L87 Difference]: Start difference. First operand 9727 states and 18054 transitions. cyclomatic complexity: 8362 Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:48,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:48,588 INFO L93 Difference]: Finished difference Result 13622 states and 25275 transitions. [2022-11-20 12:00:48,588 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13622 states and 25275 transitions. [2022-11-20 12:00:48,637 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4502 [2022-11-20 12:00:48,674 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13622 states to 13622 states and 25275 transitions. [2022-11-20 12:00:48,674 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13584 [2022-11-20 12:00:48,684 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13584 [2022-11-20 12:00:48,684 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13622 states and 25275 transitions. [2022-11-20 12:00:48,684 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:48,684 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13622 states and 25275 transitions. [2022-11-20 12:00:48,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13622 states and 25275 transitions. [2022-11-20 12:00:48,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13622 to 9727. [2022-11-20 12:00:48,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9727 states, 9727 states have (on average 1.8552482779891024) internal successors, (18046), 9726 states have internal predecessors, (18046), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:48,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9727 states to 9727 states and 18046 transitions. [2022-11-20 12:00:48,822 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9727 states and 18046 transitions. [2022-11-20 12:00:48,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:00:48,823 INFO L428 stractBuchiCegarLoop]: Abstraction has 9727 states and 18046 transitions. [2022-11-20 12:00:48,823 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-11-20 12:00:48,824 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9727 states and 18046 transitions. [2022-11-20 12:00:48,850 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:48,850 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:48,850 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:48,851 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:48,851 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:48,851 INFO L748 eck$LassoCheckResult]: Stem: 578961#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 576974#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 576975#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 578909#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 578117#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 574949#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 574950#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 577601#L564 assume !(0 == getOrigin_~person#1); 571581#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 571582#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 572170#L999 assume !(0 == initPersonOnFloor_~floor#1); 572171#L1026 assume !(1 == initPersonOnFloor_~floor#1); 577996#L1053 assume !(2 == initPersonOnFloor_~floor#1); 578494#L1080 assume 3 == initPersonOnFloor_~floor#1; 575679#L1081 assume !(0 == initPersonOnFloor_~person#1); 575680#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 573512#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 570368#L791 assume !(0 == callOnFloor_~floorID#1); 570210#L794 assume !(1 == callOnFloor_~floorID#1); 570166#L797 assume !(2 == callOnFloor_~floorID#1); 570167#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 572205#L803-2 assume { :end_inline_callOnFloor } true; 572206#L1143 assume { :end_inline_initPersonOnFloor } true; 578484#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 577275#L564-1 assume !(0 == getOrigin_~person#1); 572671#L568-1 assume !(1 == getOrigin_~person#1); 572672#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 578987#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 576084#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 576085#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 577477#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 577478#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 578115#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 576354#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 576355#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 579246#L791-2 assume !(0 == callOnFloor_~floorID#1); 579245#L794-2 assume !(1 == callOnFloor_~floorID#1); 579244#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 571810#L803-5 assume { :end_inline_callOnFloor } true; 577324#L1143-1 assume { :end_inline_initPersonOnFloor } true; 573186#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 573187#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 570698#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 570699#L728 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 571000#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 571001#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 575258#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 575063#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 574660#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 571564#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 570957#L2853 assume !(0 != timeShift_~tmp___9~2#1); 570959#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 571631#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 571632#L728-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 571935#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 574723#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 570556#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 570557#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 570283#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 570094#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 570095#L2612 assume !(1 == ~currentHeading~0); 574569#L2622 assume !(0 == ~currentFloorID~0); 574570#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 574367#L2628-1 assume { :end_inline_continueInDirection } true; 569565#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 569566#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 571923#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 571925#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 573809#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 573357#L3226-2 [2022-11-20 12:00:48,852 INFO L750 eck$LassoCheckResult]: Loop: 573357#L3226-2 assume !false; 574130#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 574131#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 569806#L3235-2 assume !false; 569807#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 573238#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 573357#L3226-2 [2022-11-20 12:00:48,852 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:48,852 INFO L85 PathProgramCache]: Analyzing trace with hash 1437608285, now seen corresponding path program 1 times [2022-11-20 12:00:48,853 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:48,853 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [480087006] [2022-11-20 12:00:48,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:48,853 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:48,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:48,940 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:48,940 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:48,941 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [480087006] [2022-11-20 12:00:48,941 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [480087006] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:48,941 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:48,941 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 12:00:48,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599458688] [2022-11-20 12:00:48,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:48,942 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:48,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:48,942 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 9 times [2022-11-20 12:00:48,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:48,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [689030452] [2022-11-20 12:00:48,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:48,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:48,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:48,946 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:48,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:48,950 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:48,970 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:48,970 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 12:00:48,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:00:48,971 INFO L87 Difference]: Start difference. First operand 9727 states and 18046 transitions. cyclomatic complexity: 8354 Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:53,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:00:53,666 INFO L93 Difference]: Finished difference Result 17145 states and 31306 transitions. [2022-11-20 12:00:53,666 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17145 states and 31306 transitions. [2022-11-20 12:00:53,746 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4400 [2022-11-20 12:00:53,799 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17145 states to 17145 states and 31306 transitions. [2022-11-20 12:00:53,800 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17069 [2022-11-20 12:00:53,813 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17069 [2022-11-20 12:00:53,813 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17145 states and 31306 transitions. [2022-11-20 12:00:53,820 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:00:53,820 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17145 states and 31306 transitions. [2022-11-20 12:00:53,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17145 states and 31306 transitions. [2022-11-20 12:00:53,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17145 to 9727. [2022-11-20 12:00:53,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9727 states, 9727 states have (on average 1.8161817621054797) internal successors, (17666), 9726 states have internal predecessors, (17666), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:00:54,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9727 states to 9727 states and 17666 transitions. [2022-11-20 12:00:54,006 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9727 states and 17666 transitions. [2022-11-20 12:00:54,006 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 12:00:54,007 INFO L428 stractBuchiCegarLoop]: Abstraction has 9727 states and 17666 transitions. [2022-11-20 12:00:54,007 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-11-20 12:00:54,007 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9727 states and 17666 transitions. [2022-11-20 12:00:54,045 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2435 [2022-11-20 12:00:54,045 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:00:54,045 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:00:54,046 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:00:54,046 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:00:54,047 INFO L748 eck$LassoCheckResult]: Stem: 605841#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 603838#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 603839#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 605789#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 604993#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 601803#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 601804#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 604473#L564 assume !(0 == getOrigin_~person#1); 598442#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 598443#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 599021#L999 assume !(0 == initPersonOnFloor_~floor#1); 599022#L1026 assume !(1 == initPersonOnFloor_~floor#1); 604872#L1053 assume !(2 == initPersonOnFloor_~floor#1); 605371#L1080 assume 3 == initPersonOnFloor_~floor#1; 602534#L1081 assume !(0 == initPersonOnFloor_~person#1); 602535#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 600364#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 597236#L791 assume !(0 == callOnFloor_~floorID#1); 597081#L794 assume !(1 == callOnFloor_~floorID#1); 597034#L797 assume !(2 == callOnFloor_~floorID#1); 597035#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 599059#L803-2 assume { :end_inline_callOnFloor } true; 599060#L1143 assume { :end_inline_initPersonOnFloor } true; 605361#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 604145#L564-1 assume !(0 == getOrigin_~person#1); 599522#L568-1 assume !(1 == getOrigin_~person#1); 599523#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 605868#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 602941#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 602942#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 604345#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 604346#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 604991#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 603213#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 603214#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 606127#L791-2 assume !(0 == callOnFloor_~floorID#1); 606126#L794-2 assume !(1 == callOnFloor_~floorID#1); 606125#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 598668#L803-5 assume { :end_inline_callOnFloor } true; 604193#L1143-1 assume { :end_inline_initPersonOnFloor } true; 600036#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 600037#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 597563#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 597564#L728 assume !(0 == isFloorCalling_~floorID#1); 605686#L732 assume !(1 == isFloorCalling_~floorID#1); 605687#L736 assume !(2 == isFloorCalling_~floorID#1); 604831#L740 assume !(3 == isFloorCalling_~floorID#1); 604242#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 597861#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 597862#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 602113#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 601917#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 601512#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 598425#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 597819#L2853 assume !(0 != timeShift_~tmp___9~2#1); 597821#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 598491#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 598492#L728-3 assume !(0 == isFloorCalling_~floorID#1); 605797#L732-3 assume !(1 == isFloorCalling_~floorID#1); 598786#L736-3 assume !(2 == isFloorCalling_~floorID#1); 598787#L740-3 assume !(3 == isFloorCalling_~floorID#1); 600844#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 600845#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 601574#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 597422#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 597423#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 597154#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 596960#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 596961#L2612 assume !(1 == ~currentHeading~0); 601421#L2622 assume !(0 == ~currentFloorID~0); 601422#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 601219#L2628-1 assume { :end_inline_continueInDirection } true; 596446#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 596447#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 598778#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 598780#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 600661#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 600210#L3226-2 [2022-11-20 12:00:54,047 INFO L750 eck$LassoCheckResult]: Loop: 600210#L3226-2 assume !false; 600984#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 600985#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 596683#L3235-2 assume !false; 596684#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 600090#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 600210#L3226-2 [2022-11-20 12:00:54,047 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:54,047 INFO L85 PathProgramCache]: Analyzing trace with hash 526400329, now seen corresponding path program 1 times [2022-11-20 12:00:54,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:54,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [885542168] [2022-11-20 12:00:54,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:54,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:54,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:00:54,247 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:00:54,247 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:00:54,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [885542168] [2022-11-20 12:00:54,248 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [885542168] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:00:54,248 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:00:54,248 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:00:54,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [332244854] [2022-11-20 12:00:54,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:00:54,249 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:00:54,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:00:54,250 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 10 times [2022-11-20 12:00:54,250 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:00:54,251 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [918053243] [2022-11-20 12:00:54,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:00:54,251 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:00:54,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:54,258 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:00:54,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:00:54,264 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:00:54,289 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:00:54,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 12:00:54,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 12:00:54,290 INFO L87 Difference]: Start difference. First operand 9727 states and 17666 transitions. cyclomatic complexity: 7974 Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 5 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:05,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:01:05,372 INFO L93 Difference]: Finished difference Result 66291 states and 121399 transitions. [2022-11-20 12:01:05,372 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66291 states and 121399 transitions. [2022-11-20 12:01:05,584 INFO L131 ngComponentsAnalysis]: Automaton has 354 accepting balls. 15515 [2022-11-20 12:01:05,758 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66291 states to 66291 states and 121399 transitions. [2022-11-20 12:01:05,758 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 65911 [2022-11-20 12:01:05,792 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 65911 [2022-11-20 12:01:05,792 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66291 states and 121399 transitions. [2022-11-20 12:01:05,807 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:01:05,808 INFO L218 hiAutomatonCegarLoop]: Abstraction has 66291 states and 121399 transitions. [2022-11-20 12:01:05,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66291 states and 121399 transitions. [2022-11-20 12:01:06,360 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66291 to 19298. [2022-11-20 12:01:06,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19298 states, 19298 states have (on average 1.8172349466265934) internal successors, (35069), 19297 states have internal predecessors, (35069), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:06,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19298 states to 19298 states and 35069 transitions. [2022-11-20 12:01:06,400 INFO L240 hiAutomatonCegarLoop]: Abstraction has 19298 states and 35069 transitions. [2022-11-20 12:01:06,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-20 12:01:06,400 INFO L428 stractBuchiCegarLoop]: Abstraction has 19298 states and 35069 transitions. [2022-11-20 12:01:06,401 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-11-20 12:01:06,401 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19298 states and 35069 transitions. [2022-11-20 12:01:06,443 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4844 [2022-11-20 12:01:06,443 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:01:06,444 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:01:06,444 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:01:06,444 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:01:06,445 INFO L748 eck$LassoCheckResult]: Stem: 682135#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 679990#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 679991#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 682075#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 681209#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 677891#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 677892#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 680655#L564 assume !(0 == getOrigin_~person#1); 674491#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 674492#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 675072#L999 assume !(0 == initPersonOnFloor_~floor#1); 675073#L1026 assume !(1 == initPersonOnFloor_~floor#1); 681073#L1053 assume !(2 == initPersonOnFloor_~floor#1); 681615#L1080 assume 3 == initPersonOnFloor_~floor#1; 678642#L1081 assume !(0 == initPersonOnFloor_~person#1); 678643#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 676422#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 673282#L791 assume !(0 == callOnFloor_~floorID#1); 673127#L794 assume !(1 == callOnFloor_~floorID#1); 673080#L797 assume !(2 == callOnFloor_~floorID#1); 673081#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 678634#L803-2 assume { :end_inline_callOnFloor } true; 682606#L1143 assume { :end_inline_initPersonOnFloor } true; 682605#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 682604#L564-1 assume !(0 == getOrigin_~person#1); 682603#L568-1 assume !(1 == getOrigin_~person#1); 682602#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 682601#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 682600#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 682599#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 682598#L1053-1 assume !(2 == initPersonOnFloor_~floor#1); 682595#L1080-1 assume !(3 == initPersonOnFloor_~floor#1); 682589#L1107-2 assume !(4 == initPersonOnFloor_~floor#1); 682580#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 682575#L791-2 assume !(0 == callOnFloor_~floorID#1); 682573#L794-2 assume !(1 == callOnFloor_~floorID#1); 682571#L797-2 assume !(2 == callOnFloor_~floorID#1); 682569#L800-2 assume !(3 == callOnFloor_~floorID#1); 682567#L803-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 674719#L803-5 assume { :end_inline_callOnFloor } true; 680356#L1143-1 assume { :end_inline_initPersonOnFloor } true; 676093#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 676094#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 678689#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 682562#L728 assume !(0 == isFloorCalling_~floorID#1); 682560#L732 assume !(1 == isFloorCalling_~floorID#1); 682558#L736 assume !(2 == isFloorCalling_~floorID#1); 682556#L740 assume !(3 == isFloorCalling_~floorID#1); 682554#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 682552#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 682550#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 682547#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 678008#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 677597#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 674474#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 673867#L2853 assume !(0 != timeShift_~tmp___9~2#1); 673869#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 674540#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 674541#L728-3 assume !(0 == isFloorCalling_~floorID#1); 682084#L732-3 assume !(1 == isFloorCalling_~floorID#1); 674834#L736-3 assume !(2 == isFloorCalling_~floorID#1); 674835#L740-3 assume !(3 == isFloorCalling_~floorID#1); 676917#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 676918#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 677659#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 673468#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 673469#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 673200#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 673006#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 673007#L2612 assume !(1 == ~currentHeading~0); 677502#L2622 assume !(0 == ~currentFloorID~0); 677503#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 677297#L2628-1 assume { :end_inline_continueInDirection } true; 672491#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 672492#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 674829#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 674831#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 688949#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 688948#L3226-2 [2022-11-20 12:01:06,445 INFO L750 eck$LassoCheckResult]: Loop: 688948#L3226-2 assume !false; 688945#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 688941#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 688938#L3235-2 assume !false; 688935#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 688936#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 688948#L3226-2 [2022-11-20 12:01:06,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:06,446 INFO L85 PathProgramCache]: Analyzing trace with hash 1873642235, now seen corresponding path program 1 times [2022-11-20 12:01:06,446 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:06,446 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1797039432] [2022-11-20 12:01:06,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:06,446 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:06,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:01:06,537 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:01:06,537 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:01:06,538 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1797039432] [2022-11-20 12:01:06,538 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1797039432] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:01:06,538 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:01:06,538 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 12:01:06,538 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1892547517] [2022-11-20 12:01:06,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:01:06,539 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:01:06,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:06,539 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 11 times [2022-11-20 12:01:06,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:06,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [940887952] [2022-11-20 12:01:06,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:06,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:06,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:06,543 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:01:06,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:06,546 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:01:06,564 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:01:06,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 12:01:06,564 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:01:06,565 INFO L87 Difference]: Start difference. First operand 19298 states and 35069 transitions. cyclomatic complexity: 15841 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:06,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:01:06,914 INFO L93 Difference]: Finished difference Result 34586 states and 62899 transitions. [2022-11-20 12:01:06,914 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34586 states and 62899 transitions. [2022-11-20 12:01:07,018 INFO L131 ngComponentsAnalysis]: Automaton has 102 accepting balls. 13060 [2022-11-20 12:01:07,095 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34586 states to 34586 states and 62899 transitions. [2022-11-20 12:01:07,095 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34510 [2022-11-20 12:01:07,115 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34510 [2022-11-20 12:01:07,116 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34586 states and 62899 transitions. [2022-11-20 12:01:07,121 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:01:07,121 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34586 states and 62899 transitions. [2022-11-20 12:01:07,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34586 states and 62899 transitions. [2022-11-20 12:01:07,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34586 to 19270. [2022-11-20 12:01:07,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19270 states, 19270 states have (on average 1.8172807472755579) internal successors, (35019), 19269 states have internal predecessors, (35019), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:07,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19270 states to 19270 states and 35019 transitions. [2022-11-20 12:01:07,739 INFO L240 hiAutomatonCegarLoop]: Abstraction has 19270 states and 35019 transitions. [2022-11-20 12:01:07,739 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:01:07,740 INFO L428 stractBuchiCegarLoop]: Abstraction has 19270 states and 35019 transitions. [2022-11-20 12:01:07,740 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-11-20 12:01:07,740 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19270 states and 35019 transitions. [2022-11-20 12:01:07,806 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4844 [2022-11-20 12:01:07,806 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:01:07,806 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:01:07,807 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:01:07,807 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:01:07,809 INFO L748 eck$LassoCheckResult]: Stem: 736209#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 733965#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 733966#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 736137#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 735218#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 731822#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 731823#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 734663#L564 assume !(0 == getOrigin_~person#1); 728391#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 728392#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 728980#L999 assume !(0 == initPersonOnFloor_~floor#1); 728981#L1026 assume !(1 == initPersonOnFloor_~floor#1); 735086#L1053 assume !(2 == initPersonOnFloor_~floor#1); 735639#L1080 assume 3 == initPersonOnFloor_~floor#1; 732581#L1081 assume !(0 == initPersonOnFloor_~person#1); 732582#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 730346#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 727176#L791 assume !(0 == callOnFloor_~floorID#1); 727021#L794 assume !(1 == callOnFloor_~floorID#1); 726974#L797 assume !(2 == callOnFloor_~floorID#1); 726975#L800 assume !(3 == callOnFloor_~floorID#1); 732575#L803 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 729016#L803-2 assume { :end_inline_callOnFloor } true; 729017#L1143 assume { :end_inline_initPersonOnFloor } true; 735623#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 734301#L564-1 assume !(0 == getOrigin_~person#1); 729494#L568-1 assume !(1 == getOrigin_~person#1); 729495#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 736246#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 733006#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 733007#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 734524#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 734525#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 735215#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 733292#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 732470#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 732471#L791-2 assume !(0 == callOnFloor_~floorID#1); 737606#L794-2 assume !(1 == callOnFloor_~floorID#1); 737603#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 730591#L803-5 assume { :end_inline_callOnFloor } true; 737599#L1143-1 assume { :end_inline_initPersonOnFloor } true; 737589#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 736947#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 736946#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 736945#L728 assume !(0 == isFloorCalling_~floorID#1); 736748#L732 assume !(1 == isFloorCalling_~floorID#1); 736741#L736 assume !(2 == isFloorCalling_~floorID#1); 736726#L740 assume !(3 == isFloorCalling_~floorID#1); 736724#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 736722#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 736720#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 736717#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 731939#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 731527#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 730445#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 738696#L2853 assume !(0 != timeShift_~tmp___9~2#1); 738690#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 738689#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 738688#L728-3 assume !(0 == isFloorCalling_~floorID#1); 738687#L732-3 assume !(1 == isFloorCalling_~floorID#1); 738686#L736-3 assume !(2 == isFloorCalling_~floorID#1); 738685#L740-3 assume !(3 == isFloorCalling_~floorID#1); 738684#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 738683#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 738682#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 738646#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 738641#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 738640#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 738638#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 738637#L2612 assume !(1 == ~currentHeading~0); 738629#L2622 assume !(0 == ~currentFloorID~0); 738628#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 738627#L2628-1 assume { :end_inline_continueInDirection } true; 738624#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 738575#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 728730#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 728732#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 730650#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 730191#L3226-2 [2022-11-20 12:01:07,809 INFO L750 eck$LassoCheckResult]: Loop: 730191#L3226-2 assume !false; 735949#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 738594#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 738599#L3235-2 assume !false; 738598#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 730190#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 730191#L3226-2 [2022-11-20 12:01:07,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:07,811 INFO L85 PathProgramCache]: Analyzing trace with hash 1651041609, now seen corresponding path program 1 times [2022-11-20 12:01:07,811 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:07,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620252649] [2022-11-20 12:01:07,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:07,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:07,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:01:07,939 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:01:07,940 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:01:07,942 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620252649] [2022-11-20 12:01:07,942 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620252649] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:01:07,943 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:01:07,943 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:01:07,943 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1264316585] [2022-11-20 12:01:07,943 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:01:07,945 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:01:07,946 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:07,946 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 12 times [2022-11-20 12:01:07,946 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:07,946 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1262012474] [2022-11-20 12:01:07,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:07,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:07,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:07,950 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:01:07,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:07,954 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:01:07,973 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:01:07,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:01:07,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:01:07,974 INFO L87 Difference]: Start difference. First operand 19270 states and 35019 transitions. cyclomatic complexity: 15819 Second operand has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:09,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:01:09,110 INFO L93 Difference]: Finished difference Result 47947 states and 87211 transitions. [2022-11-20 12:01:09,110 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 47947 states and 87211 transitions. [2022-11-20 12:01:09,254 INFO L131 ngComponentsAnalysis]: Automaton has 144 accepting balls. 17536 [2022-11-20 12:01:09,369 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 47947 states to 47947 states and 87211 transitions. [2022-11-20 12:01:09,369 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47833 [2022-11-20 12:01:09,393 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47833 [2022-11-20 12:01:09,393 INFO L73 IsDeterministic]: Start isDeterministic. Operand 47947 states and 87211 transitions. [2022-11-20 12:01:09,398 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:01:09,398 INFO L218 hiAutomatonCegarLoop]: Abstraction has 47947 states and 87211 transitions. [2022-11-20 12:01:09,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47947 states and 87211 transitions. [2022-11-20 12:01:09,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47947 to 19257. [2022-11-20 12:01:09,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19257 states, 19257 states have (on average 1.817365113984525) internal successors, (34997), 19256 states have internal predecessors, (34997), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:09,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19257 states to 19257 states and 34997 transitions. [2022-11-20 12:01:09,681 INFO L240 hiAutomatonCegarLoop]: Abstraction has 19257 states and 34997 transitions. [2022-11-20 12:01:09,681 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-20 12:01:09,682 INFO L428 stractBuchiCegarLoop]: Abstraction has 19257 states and 34997 transitions. [2022-11-20 12:01:09,682 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-11-20 12:01:09,682 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19257 states and 34997 transitions. [2022-11-20 12:01:09,729 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4844 [2022-11-20 12:01:09,729 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:01:09,729 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:01:09,730 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:01:09,730 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:01:09,731 INFO L748 eck$LassoCheckResult]: Stem: 803044#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 801013#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 801014#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 802990#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 802180#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 798975#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 798976#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 801653#L564 assume !(0 == getOrigin_~person#1); 795613#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 795614#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 796194#L999 assume !(0 == initPersonOnFloor_~floor#1); 796195#L1026 assume !(1 == initPersonOnFloor_~floor#1); 802057#L1053 assume !(2 == initPersonOnFloor_~floor#1); 802562#L1080 assume 3 == initPersonOnFloor_~floor#1; 799708#L1081 assume !(0 == initPersonOnFloor_~person#1); 799709#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 797537#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 794408#L791 assume !(0 == callOnFloor_~floorID#1); 794253#L794 assume !(1 == callOnFloor_~floorID#1); 794206#L797 assume !(2 == callOnFloor_~floorID#1); 794207#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 796230#L803-2 assume { :end_inline_callOnFloor } true; 796231#L1143 assume { :end_inline_initPersonOnFloor } true; 802552#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 801322#L564-1 assume !(0 == getOrigin_~person#1); 796698#L568-1 assume !(1 == getOrigin_~person#1); 796699#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 803073#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 800113#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 800114#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 801523#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 801524#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 802178#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 800387#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 799607#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 799608#L791-2 assume !(0 == callOnFloor_~floorID#1); 802871#L794-2 assume !(1 == callOnFloor_~floorID#1); 802872#L797-2 assume !(2 == callOnFloor_~floorID#1); 795840#L800-2 assume !(3 == callOnFloor_~floorID#1); 795842#L803-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 797778#L803-5 assume { :end_inline_callOnFloor } true; 803492#L1143-1 assume { :end_inline_initPersonOnFloor } true; 803490#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 803488#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 803486#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 803484#L728 assume !(0 == isFloorCalling_~floorID#1); 803482#L732 assume !(1 == isFloorCalling_~floorID#1); 803387#L736 assume !(2 == isFloorCalling_~floorID#1); 803380#L740 assume !(3 == isFloorCalling_~floorID#1); 803365#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 803363#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 803361#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 803358#L2700 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 799090#L1963 stopRequestedAtCurrentFloor_#t~ret83#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1; 798685#L2704 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 797634#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 805384#L2853 assume !(0 != timeShift_~tmp___9~2#1); 805385#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 805827#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 805826#L728-3 assume !(0 == isFloorCalling_~floorID#1); 805825#L732-3 assume !(1 == isFloorCalling_~floorID#1); 805824#L736-3 assume !(2 == isFloorCalling_~floorID#1); 805823#L740-3 assume !(3 == isFloorCalling_~floorID#1); 805822#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 805821#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 805820#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 805819#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 804767#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 804766#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 804764#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 804763#L2612 assume !(1 == ~currentHeading~0); 804760#L2622 assume !(0 == ~currentFloorID~0); 804754#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 804753#L2628-1 assume { :end_inline_continueInDirection } true; 804748#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 804645#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 804646#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 804749#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 806542#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 806543#L3226-2 [2022-11-20 12:01:09,731 INFO L750 eck$LassoCheckResult]: Loop: 806543#L3226-2 assume !false; 806540#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 806541#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 806553#L3235-2 assume !false; 806550#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 806548#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 806543#L3226-2 [2022-11-20 12:01:09,732 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:09,732 INFO L85 PathProgramCache]: Analyzing trace with hash 1211647684, now seen corresponding path program 1 times [2022-11-20 12:01:09,732 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:09,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1843194120] [2022-11-20 12:01:09,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:09,733 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:09,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:01:09,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:01:09,848 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:01:09,849 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1843194120] [2022-11-20 12:01:09,849 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1843194120] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:01:09,849 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:01:09,849 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:01:09,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2124385574] [2022-11-20 12:01:09,850 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:01:09,850 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:01:09,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:09,851 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 13 times [2022-11-20 12:01:09,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:09,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [475557574] [2022-11-20 12:01:09,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:09,851 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:09,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:09,856 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:01:09,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:09,859 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:01:09,881 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:01:09,881 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:01:09,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:01:09,882 INFO L87 Difference]: Start difference. First operand 19257 states and 34997 transitions. cyclomatic complexity: 15810 Second operand has 5 states, 5 states have (on average 15.8) internal successors, (79), 5 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:10,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:01:10,925 INFO L93 Difference]: Finished difference Result 21035 states and 38250 transitions. [2022-11-20 12:01:10,925 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21035 states and 38250 transitions. [2022-11-20 12:01:11,007 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8558 [2022-11-20 12:01:11,060 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21035 states to 21035 states and 38250 transitions. [2022-11-20 12:01:11,060 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20997 [2022-11-20 12:01:11,073 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20997 [2022-11-20 12:01:11,073 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21035 states and 38250 transitions. [2022-11-20 12:01:11,081 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:01:11,081 INFO L218 hiAutomatonCegarLoop]: Abstraction has 21035 states and 38250 transitions. [2022-11-20 12:01:11,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21035 states and 38250 transitions. [2022-11-20 12:01:11,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21035 to 13433. [2022-11-20 12:01:11,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13433 states, 13433 states have (on average 1.8172411226085015) internal successors, (24411), 13432 states have internal predecessors, (24411), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:11,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13433 states to 13433 states and 24411 transitions. [2022-11-20 12:01:11,256 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13433 states and 24411 transitions. [2022-11-20 12:01:11,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:01:11,257 INFO L428 stractBuchiCegarLoop]: Abstraction has 13433 states and 24411 transitions. [2022-11-20 12:01:11,257 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-11-20 12:01:11,258 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13433 states and 24411 transitions. [2022-11-20 12:01:11,297 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4476 [2022-11-20 12:01:11,297 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:01:11,298 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:01:11,298 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:01:11,299 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:01:11,299 INFO L748 eck$LassoCheckResult]: Stem: 843228#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 841239#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 841240#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 843176#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 842391#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 839222#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 839223#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 841874#L564 assume !(0 == getOrigin_~person#1); 835905#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 835906#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 836475#L999 assume !(0 == initPersonOnFloor_~floor#1); 836476#L1026 assume !(1 == initPersonOnFloor_~floor#1); 842271#L1053 assume !(2 == initPersonOnFloor_~floor#1); 842761#L1080 assume 3 == initPersonOnFloor_~floor#1; 839945#L1081 assume !(0 == initPersonOnFloor_~person#1); 839946#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 837800#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 834711#L791 assume !(0 == callOnFloor_~floorID#1); 834556#L794 assume !(1 == callOnFloor_~floorID#1); 834509#L797 assume !(2 == callOnFloor_~floorID#1); 834510#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 836513#L803-2 assume { :end_inline_callOnFloor } true; 836514#L1143 assume { :end_inline_initPersonOnFloor } true; 842752#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 841545#L564-1 assume !(0 == getOrigin_~person#1); 836971#L568-1 assume !(1 == getOrigin_~person#1); 836972#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 843255#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 840343#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 840344#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 841746#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 841747#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 842389#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 840613#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 839847#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 839848#L791-2 assume !(0 == callOnFloor_~floorID#1); 843059#L794-2 assume !(1 == callOnFloor_~floorID#1); 843060#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 843144#L803-5 assume { :end_inline_callOnFloor } true; 841593#L1143-1 assume { :end_inline_initPersonOnFloor } true; 837474#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 837475#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 835036#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 835037#L728 assume !(0 == isFloorCalling_~floorID#1); 843073#L732 assume !(1 == isFloorCalling_~floorID#1); 843074#L736 assume !(2 == isFloorCalling_~floorID#1); 842230#L740 assume !(3 == isFloorCalling_~floorID#1); 841642#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 835334#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 835335#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 839525#L2700 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret81#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 841417#L2674-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 841682#L1963-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 841683#L1980-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 839045#L2001-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 839046#L2685-1 stopRequestedAtCurrentFloor_#t~ret85#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 835888#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 835292#L2853 assume !(0 != timeShift_~tmp___9~2#1); 835294#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 835954#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 835955#L728-3 assume !(0 == isFloorCalling_~floorID#1); 843184#L732-3 assume !(1 == isFloorCalling_~floorID#1); 836240#L736-3 assume !(2 == isFloorCalling_~floorID#1); 836241#L740-3 assume !(3 == isFloorCalling_~floorID#1); 838271#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 838272#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 838995#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 834895#L2555 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 834896#L1963-3 stopRequestedInDirection_#t~ret74#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 834629#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 834435#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 834436#L2612 assume !(1 == ~currentHeading~0); 838845#L2622 assume !(0 == ~currentFloorID~0); 838846#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 838643#L2628-1 assume { :end_inline_continueInDirection } true; 833923#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 833924#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 836232#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 836234#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 838091#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 837647#L3226-2 [2022-11-20 12:01:11,300 INFO L750 eck$LassoCheckResult]: Loop: 837647#L3226-2 assume !false; 838408#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 838409#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 834160#L3235-2 assume !false; 834161#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 837528#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 837647#L3226-2 [2022-11-20 12:01:11,300 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:11,301 INFO L85 PathProgramCache]: Analyzing trace with hash 463883413, now seen corresponding path program 1 times [2022-11-20 12:01:11,301 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:11,301 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [649638430] [2022-11-20 12:01:11,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:11,301 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:11,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:01:11,437 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:01:11,437 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:01:11,438 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [649638430] [2022-11-20 12:01:11,438 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [649638430] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:01:11,438 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:01:11,438 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:01:11,438 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [407916209] [2022-11-20 12:01:11,439 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:01:11,439 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:01:11,439 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:11,440 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 14 times [2022-11-20 12:01:11,440 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:11,440 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1451351369] [2022-11-20 12:01:11,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:11,440 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:11,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:11,444 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:01:11,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:11,448 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:01:11,469 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:01:11,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 12:01:11,470 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 12:01:11,470 INFO L87 Difference]: Start difference. First operand 13433 states and 24411 transitions. cyclomatic complexity: 11022 Second operand has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 5 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:17,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:01:17,305 INFO L93 Difference]: Finished difference Result 43253 states and 79191 transitions. [2022-11-20 12:01:17,306 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 43253 states and 79191 transitions. [2022-11-20 12:01:17,431 INFO L131 ngComponentsAnalysis]: Automaton has 227 accepting balls. 14598 [2022-11-20 12:01:17,528 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 43253 states to 43253 states and 79191 transitions. [2022-11-20 12:01:17,528 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43101 [2022-11-20 12:01:17,551 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43101 [2022-11-20 12:01:17,551 INFO L73 IsDeterministic]: Start isDeterministic. Operand 43253 states and 79191 transitions. [2022-11-20 12:01:17,572 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:01:17,572 INFO L218 hiAutomatonCegarLoop]: Abstraction has 43253 states and 79191 transitions. [2022-11-20 12:01:17,595 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43253 states and 79191 transitions. [2022-11-20 12:01:17,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43253 to 13423. [2022-11-20 12:01:17,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13423 states, 13423 states have (on average 1.8171049690829173) internal successors, (24391), 13422 states have internal predecessors, (24391), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:17,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13423 states to 13423 states and 24391 transitions. [2022-11-20 12:01:17,823 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13423 states and 24391 transitions. [2022-11-20 12:01:17,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-20 12:01:17,824 INFO L428 stractBuchiCegarLoop]: Abstraction has 13423 states and 24391 transitions. [2022-11-20 12:01:17,824 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-11-20 12:01:17,824 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13423 states and 24391 transitions. [2022-11-20 12:01:17,862 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4474 [2022-11-20 12:01:17,863 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:01:17,863 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:01:17,864 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:01:17,864 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:01:17,864 INFO L748 eck$LassoCheckResult]: Stem: 900300#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 898103#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 898104#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 900235#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 899336#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 895993#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 895994#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 898786#L564 assume !(0 == getOrigin_~person#1); 892623#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 892624#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 893200#L999 assume !(0 == initPersonOnFloor_~floor#1); 893201#L1026 assume !(1 == initPersonOnFloor_~floor#1); 899208#L1053 assume !(2 == initPersonOnFloor_~floor#1); 899755#L1080 assume 3 == initPersonOnFloor_~floor#1; 896747#L1081 assume !(0 == initPersonOnFloor_~person#1); 896748#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 894539#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 891426#L791 assume !(0 == callOnFloor_~floorID#1); 891271#L794 assume !(1 == callOnFloor_~floorID#1); 891224#L797 assume !(2 == callOnFloor_~floorID#1); 891225#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 893235#L803-2 assume { :end_inline_callOnFloor } true; 893236#L1143 assume { :end_inline_initPersonOnFloor } true; 899745#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 898426#L564-1 assume !(0 == getOrigin_~person#1); 893694#L568-1 assume !(1 == getOrigin_~person#1); 893695#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 900333#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 897166#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 897167#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 898644#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 898645#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 899334#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 897447#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 896642#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 896643#L791-2 assume !(0 == callOnFloor_~floorID#1); 900101#L794-2 assume !(1 == callOnFloor_~floorID#1); 900102#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 900197#L803-5 assume { :end_inline_callOnFloor } true; 898477#L1143-1 assume { :end_inline_initPersonOnFloor } true; 894206#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 894207#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 891750#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 891751#L728 assume !(0 == isFloorCalling_~floorID#1); 900120#L732 assume !(1 == isFloorCalling_~floorID#1); 900121#L736 assume !(2 == isFloorCalling_~floorID#1); 899167#L740 assume !(3 == isFloorCalling_~floorID#1); 898528#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 892051#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 892052#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 896305#L2700 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret81#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 898289#L2674-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 898571#L1963-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 898572#L1980-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 895811#L2001-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 895812#L2685-1 stopRequestedAtCurrentFloor_#t~ret85#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 892606#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 892006#L2853 assume !(0 != timeShift_~tmp___9~2#1); 892008#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 892672#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 892673#L728-3 assume !(0 == isFloorCalling_~floorID#1); 900246#L732-3 assume !(1 == isFloorCalling_~floorID#1); 892962#L736-3 assume !(2 == isFloorCalling_~floorID#1); 892963#L740-3 assume !(3 == isFloorCalling_~floorID#1); 895018#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 895019#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 895762#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 891610#L2555 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret70#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret71#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 891611#L2577 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~24#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 891756#L2598 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1; 896956#L2521 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_#t~ret59#1, stopRequestedInDirection__wrappee__empty_#t~ret60#1, stopRequestedInDirection__wrappee__empty_#t~ret61#1, stopRequestedInDirection__wrappee__empty_#t~ret62#1, stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~18#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~3#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 899566#L2167-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 894004#L2336-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 890858#L2489-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 891563#L2539 stopRequestedInDirection_#t~ret75#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 891344#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 891156#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 891157#L2612 assume !(1 == ~currentHeading~0); 895608#L2622 assume !(0 == ~currentFloorID~0); 895609#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 895401#L2628-1 assume { :end_inline_continueInDirection } true; 890640#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 890641#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 892951#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 892953#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 894832#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 894382#L3226-2 [2022-11-20 12:01:17,865 INFO L750 eck$LassoCheckResult]: Loop: 894382#L3226-2 assume !false; 895157#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 895158#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 890876#L3235-2 assume !false; 890877#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 894261#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 894382#L3226-2 [2022-11-20 12:01:17,866 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:17,866 INFO L85 PathProgramCache]: Analyzing trace with hash 816407335, now seen corresponding path program 1 times [2022-11-20 12:01:17,866 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:17,866 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1760276648] [2022-11-20 12:01:17,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:17,867 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:17,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:01:17,936 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:01:17,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:01:17,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1760276648] [2022-11-20 12:01:17,936 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1760276648] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:01:17,937 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:01:17,937 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 12:01:17,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [931965688] [2022-11-20 12:01:17,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:01:17,938 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:01:17,938 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:17,938 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 15 times [2022-11-20 12:01:17,939 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:17,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [23490221] [2022-11-20 12:01:17,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:17,939 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:17,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:17,943 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:01:17,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:17,948 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:01:17,975 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:01:17,975 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 12:01:17,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:01:17,976 INFO L87 Difference]: Start difference. First operand 13423 states and 24391 transitions. cyclomatic complexity: 11012 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 2 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:18,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:01:18,805 INFO L93 Difference]: Finished difference Result 25542 states and 46298 transitions. [2022-11-20 12:01:18,806 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25542 states and 46298 transitions. [2022-11-20 12:01:19,230 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 8826 [2022-11-20 12:01:19,310 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25542 states to 25542 states and 46298 transitions. [2022-11-20 12:01:19,310 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25468 [2022-11-20 12:01:19,330 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25468 [2022-11-20 12:01:19,330 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25542 states and 46298 transitions. [2022-11-20 12:01:19,340 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:01:19,340 INFO L218 hiAutomatonCegarLoop]: Abstraction has 25542 states and 46298 transitions. [2022-11-20 12:01:19,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25542 states and 46298 transitions. [2022-11-20 12:01:19,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25542 to 25540. [2022-11-20 12:01:19,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25540 states, 25540 states have (on average 1.8126859827721222) internal successors, (46296), 25539 states have internal predecessors, (46296), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:19,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25540 states to 25540 states and 46296 transitions. [2022-11-20 12:01:19,586 INFO L240 hiAutomatonCegarLoop]: Abstraction has 25540 states and 46296 transitions. [2022-11-20 12:01:19,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 12:01:19,587 INFO L428 stractBuchiCegarLoop]: Abstraction has 25540 states and 46296 transitions. [2022-11-20 12:01:19,587 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-11-20 12:01:19,587 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25540 states and 46296 transitions. [2022-11-20 12:01:19,647 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 8826 [2022-11-20 12:01:19,647 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:01:19,647 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:01:19,648 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:01:19,649 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:01:19,649 INFO L748 eck$LassoCheckResult]: Stem: 939031#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 936977#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 936978#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 938979#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 938166#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 934932#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 934933#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 937632#L564 assume !(0 == getOrigin_~person#1); 931592#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 931593#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 932165#L999 assume !(0 == initPersonOnFloor_~floor#1); 932166#L1026 assume !(1 == initPersonOnFloor_~floor#1); 938040#L1053 assume !(2 == initPersonOnFloor_~floor#1); 938546#L1080 assume 3 == initPersonOnFloor_~floor#1; 935663#L1081 assume !(0 == initPersonOnFloor_~person#1); 935664#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 933491#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 930396#L791 assume !(0 == callOnFloor_~floorID#1); 930241#L794 assume !(1 == callOnFloor_~floorID#1); 930194#L797 assume !(2 == callOnFloor_~floorID#1); 930195#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 932202#L803-2 assume { :end_inline_callOnFloor } true; 932203#L1143 assume { :end_inline_initPersonOnFloor } true; 938537#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 937293#L564-1 assume !(0 == getOrigin_~person#1); 932661#L568-1 assume !(1 == getOrigin_~person#1); 932662#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 939061#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 936070#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 936071#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 937498#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 937499#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 938164#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 936345#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 935561#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 935562#L791-2 assume !(0 == callOnFloor_~floorID#1); 938856#L794-2 assume !(1 == callOnFloor_~floorID#1); 938857#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 938947#L803-5 assume { :end_inline_callOnFloor } true; 937342#L1143-1 assume { :end_inline_initPersonOnFloor } true; 933166#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 933167#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 930719#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 930720#L728 assume !(0 == isFloorCalling_~floorID#1); 938870#L732 assume !(1 == isFloorCalling_~floorID#1); 938871#L736 assume !(2 == isFloorCalling_~floorID#1); 937999#L740 assume !(3 == isFloorCalling_~floorID#1); 937393#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 931016#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 931017#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 935240#L2700 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret81#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 937161#L2674-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 937433#L1963-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 937434#L1980-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 934751#L2001-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 934752#L2685-1 stopRequestedAtCurrentFloor_#t~ret85#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 931575#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 930974#L2853 assume !(0 != timeShift_~tmp___9~2#1); 930976#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 931641#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 931642#L728-3 assume !(0 == isFloorCalling_~floorID#1); 938987#L732-3 assume !(1 == isFloorCalling_~floorID#1); 931930#L736-3 assume !(2 == isFloorCalling_~floorID#1); 931931#L740-3 assume !(3 == isFloorCalling_~floorID#1); 933965#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 933966#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 934701#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 930579#L2555 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret70#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret71#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 930580#L2577 assume !(0 != ~floorButtons_0~0); 935348#L2581 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~24#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 930725#L2598 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1; 935863#L2521 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_#t~ret59#1, stopRequestedInDirection__wrappee__empty_#t~ret60#1, stopRequestedInDirection__wrappee__empty_#t~ret61#1, stopRequestedInDirection__wrappee__empty_#t~ret62#1, stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~18#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~3#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 938370#L2167-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 932966#L2336-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 929822#L2489-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 930532#L2539 stopRequestedInDirection_#t~ret75#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 930314#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 930119#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 930120#L2612 assume !(1 == ~currentHeading~0); 934548#L2622 assume !(0 == ~currentFloorID~0); 934549#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 934346#L2628-1 assume { :end_inline_continueInDirection } true; 929611#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 929612#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 931922#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 931924#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 933783#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 933339#L3226-2 [2022-11-20 12:01:19,649 INFO L750 eck$LassoCheckResult]: Loop: 933339#L3226-2 assume !false; 934104#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 934105#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 929845#L3235-2 assume !false; 929846#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 933220#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 933339#L3226-2 [2022-11-20 12:01:19,649 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:19,650 INFO L85 PathProgramCache]: Analyzing trace with hash 1916430556, now seen corresponding path program 1 times [2022-11-20 12:01:19,650 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:19,650 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1309252147] [2022-11-20 12:01:19,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:19,650 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:19,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:01:19,722 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:01:19,723 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:01:19,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1309252147] [2022-11-20 12:01:19,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1309252147] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:01:19,723 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:01:19,723 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 12:01:19,724 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [148125082] [2022-11-20 12:01:19,724 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:01:19,724 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:01:19,724 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:19,725 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 16 times [2022-11-20 12:01:19,725 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:19,725 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1119008146] [2022-11-20 12:01:19,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:19,725 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:19,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:19,732 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:01:19,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:19,735 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:01:19,755 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:01:19,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 12:01:19,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:01:19,755 INFO L87 Difference]: Start difference. First operand 25540 states and 46296 transitions. cyclomatic complexity: 20842 Second operand has 3 states, 3 states have (on average 29.0) internal successors, (87), 2 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:20,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:01:20,595 INFO L93 Difference]: Finished difference Result 49694 states and 89839 transitions. [2022-11-20 12:01:20,596 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 49694 states and 89839 transitions. [2022-11-20 12:01:21,189 INFO L131 ngComponentsAnalysis]: Automaton has 162 accepting balls. 17510 [2022-11-20 12:01:21,337 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 49694 states to 49694 states and 89839 transitions. [2022-11-20 12:01:21,337 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49552 [2022-11-20 12:01:21,371 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49552 [2022-11-20 12:01:21,371 INFO L73 IsDeterministic]: Start isDeterministic. Operand 49694 states and 89839 transitions. [2022-11-20 12:01:21,372 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:01:21,372 INFO L218 hiAutomatonCegarLoop]: Abstraction has 49694 states and 89839 transitions. [2022-11-20 12:01:21,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49694 states and 89839 transitions. [2022-11-20 12:01:21,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49694 to 49690. [2022-11-20 12:01:21,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49690 states, 49690 states have (on average 1.8079090360233447) internal successors, (89835), 49689 states have internal predecessors, (89835), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:21,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49690 states to 49690 states and 89835 transitions. [2022-11-20 12:01:21,919 INFO L240 hiAutomatonCegarLoop]: Abstraction has 49690 states and 89835 transitions. [2022-11-20 12:01:21,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 12:01:21,920 INFO L428 stractBuchiCegarLoop]: Abstraction has 49690 states and 89835 transitions. [2022-11-20 12:01:21,920 INFO L335 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-11-20 12:01:21,921 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49690 states and 89835 transitions. [2022-11-20 12:01:22,057 INFO L131 ngComponentsAnalysis]: Automaton has 162 accepting balls. 17510 [2022-11-20 12:01:22,058 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-20 12:01:22,058 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-20 12:01:22,059 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:01:22,059 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-11-20 12:01:22,060 INFO L748 eck$LassoCheckResult]: Stem: 1014694#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1012445#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~10#1, main_~tmp~12#1;havoc main_~retValue_acc~10#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 1012446#L1702 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1014635#L1695 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~12#1;havoc valid_product_~retValue_acc~12#1;valid_product_~retValue_acc~12#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~12#1; 1013696#L1710 main_#t~ret47#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 1010269#L1651 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1010270#L1624 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret36#1, aliceCall_~tmp~5#1;havoc aliceCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1013132#L564 assume !(0 == getOrigin_~person#1); 1006850#L568 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1006851#L589 aliceCall_#t~ret36#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~5#1 := aliceCall_#t~ret36#1;havoc aliceCall_#t~ret36#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1007431#L999 assume !(0 == initPersonOnFloor_~floor#1); 1007432#L1026 assume !(1 == initPersonOnFloor_~floor#1); 1013562#L1053 assume !(2 == initPersonOnFloor_~floor#1); 1014129#L1080 assume 3 == initPersonOnFloor_~floor#1; 1011040#L1081 assume !(0 == initPersonOnFloor_~person#1); 1011041#L1084 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1008783#L1107-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1005638#L791 assume !(0 == callOnFloor_~floorID#1); 1005482#L794 assume !(1 == callOnFloor_~floorID#1); 1005436#L797 assume !(2 == callOnFloor_~floorID#1); 1005437#L800 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1007467#L803-2 assume { :end_inline_callOnFloor } true; 1007468#L1143 assume { :end_inline_initPersonOnFloor } true; 1014120#L1380 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~6#1;havoc angelinaCall_~tmp~6#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1012782#L564-1 assume !(0 == getOrigin_~person#1); 1007933#L568-1 assume !(1 == getOrigin_~person#1); 1007934#L572-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1014731#L589-1 angelinaCall_#t~ret37#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~6#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~6#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1011465#L999-1 assume !(0 == initPersonOnFloor_~floor#1); 1011466#L1026-1 assume !(1 == initPersonOnFloor_~floor#1); 1012998#L1053-1 assume 2 == initPersonOnFloor_~floor#1; 1012999#L1054-2 assume !(0 == initPersonOnFloor_~person#1); 1013694#L1057-2 assume !(1 == initPersonOnFloor_~person#1); 1011755#L1060-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1010933#L1107-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1010934#L791-2 assume !(0 == callOnFloor_~floorID#1); 1014489#L794-2 assume !(1 == callOnFloor_~floorID#1); 1014490#L797-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1014590#L803-5 assume { :end_inline_callOnFloor } true; 1012831#L1143-1 assume { :end_inline_initPersonOnFloor } true; 1008451#L1391 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_~tmp~26#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret27#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 1008452#L2015 __utac_acc__Specification13_spec__1_#t~ret27#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret27#1;havoc __utac_acc__Specification13_spec__1_#t~ret27#1; 1005965#L436 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_#t~ret84#1, stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 1005966#L728 assume !(0 == isFloorCalling_~floorID#1); 1014505#L732 assume !(1 == isFloorCalling_~floorID#1); 1014506#L736 assume !(2 == isFloorCalling_~floorID#1); 1013517#L740 assume !(3 == isFloorCalling_~floorID#1); 1012883#L744 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 1006269#L755 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1006270#L3316 stopRequestedAtCurrentFloor_#t~ret82#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1; 1010589#L2700 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret81#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~3#1 / 3); 1012642#L2674-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1012929#L1963-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret79#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~23#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 1012930#L1980-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 1010083#L2001-2 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret80#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~26#1; 1010084#L2685-1 stopRequestedAtCurrentFloor_#t~ret85#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~27#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 1006833#L2717 timeShift_#t~ret98#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 1006225#L2853 assume !(0 != timeShift_~tmp___9~2#1); 1006227#L2944 assume 1 == ~doorState~0;~doorState~0 := 0; 1006901#L2944-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret135#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~6#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~6#1; 1006902#L728-3 assume !(0 == isFloorCalling_~floorID#1); 1014643#L732-3 assume !(1 == isFloorCalling_~floorID#1); 1007190#L736-3 assume !(2 == isFloorCalling_~floorID#1); 1007191#L740-3 assume !(3 == isFloorCalling_~floorID#1); 1009270#L744-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~6#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~6#1; 1009271#L755-3 isExecutiveFloorCalling_#t~ret135#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret135#1;havoc isExecutiveFloorCalling_#t~ret135#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 1010034#L3316-1 stopRequestedInDirection_#t~ret73#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret73#1;havoc stopRequestedInDirection_#t~ret73#1; 1005821#L2555 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret70#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret71#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~6#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1;havoc isAnyLiftButtonPressed_~retValue_acc~24#1; 1005822#L2577 assume !(0 != ~floorButtons_0~0); 1010704#L2581 assume !(0 != ~floorButtons_1~0); 1006805#L2585 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~24#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~24#1; 1005971#L2598 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret69#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~19#1; 1011252#L2521 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret58#1, stopRequestedInDirection__wrappee__empty_#t~ret59#1, stopRequestedInDirection__wrappee__empty_#t~ret60#1, stopRequestedInDirection__wrappee__empty_#t~ret61#1, stopRequestedInDirection__wrappee__empty_#t~ret62#1, stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~18#1, stopRequestedInDirection__wrappee__empty_~tmp___0~4#1, stopRequestedInDirection__wrappee__empty_~tmp___1~3#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~18#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1013943#L2167-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 1008248#L2336-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 1005062#L2489-2 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret72#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~22#1; 1005774#L2539 stopRequestedInDirection_#t~ret75#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~23#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 1005556#L2568 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 1005360#L2952 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret76#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1005361#L2612 assume !(1 == ~currentHeading~0); 1009874#L2622 assume !(0 == ~currentFloorID~0); 1009875#L2622-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1009667#L2628-1 assume { :end_inline_continueInDirection } true; 1009668#L2961-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret28#1, __utac_acc__Specification13_spec__2_#t~ret29#1, __utac_acc__Specification13_spec__2_#t~ret30#1, __utac_acc__Specification13_spec__2_#t~ret31#1, __utac_acc__Specification13_spec__2_#t~ret32#1, __utac_acc__Specification13_spec__2_#t~ret33#1, __utac_acc__Specification13_spec__2_~tmp~3#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;havoc __utac_acc__Specification13_spec__2_~tmp~3#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~5#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~5#1 / 3); 1020673#L454 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~5#1; 1020674#L455 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~1#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~1#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1024665#L3156 assume !(1 == existInLiftCallsInDirection_~d#1); 1024731#L3222 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1024732#L3226-2 [2022-11-20 12:01:22,061 INFO L750 eck$LassoCheckResult]: Loop: 1024732#L3226-2 assume !false; 1024729#L3227 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1024730#L3228 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1024754#L3235-2 assume !false; 1024750#L3236 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1024748#L3294 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1024732#L3226-2 [2022-11-20 12:01:22,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:22,061 INFO L85 PathProgramCache]: Analyzing trace with hash 967017570, now seen corresponding path program 1 times [2022-11-20 12:01:22,061 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:22,061 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2041770328] [2022-11-20 12:01:22,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:22,062 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:22,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:01:22,130 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:01:22,131 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:01:22,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2041770328] [2022-11-20 12:01:22,131 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2041770328] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:01:22,131 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:01:22,131 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 12:01:22,132 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [707497807] [2022-11-20 12:01:22,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:01:22,133 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-20 12:01:22,133 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:01:22,133 INFO L85 PathProgramCache]: Analyzing trace with hash 1717871275, now seen corresponding path program 17 times [2022-11-20 12:01:22,134 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:01:22,134 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1458121586] [2022-11-20 12:01:22,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:01:22,134 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:01:22,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:22,138 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-20 12:01:22,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-20 12:01:22,142 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-20 12:01:22,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:01:22,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 12:01:22,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:01:22,164 INFO L87 Difference]: Start difference. First operand 49690 states and 89835 transitions. cyclomatic complexity: 40315 Second operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 2 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:23,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:01:23,956 INFO L93 Difference]: Finished difference Result 97802 states and 176311 transitions. [2022-11-20 12:01:23,956 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 97802 states and 176311 transitions. [2022-11-20 12:01:24,299 INFO L131 ngComponentsAnalysis]: Automaton has 322 accepting balls. 34818 [2022-11-20 12:01:24,554 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 97802 states to 97802 states and 176311 transitions. [2022-11-20 12:01:24,554 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 97528 [2022-11-20 12:01:24,615 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 97528 [2022-11-20 12:01:24,615 INFO L73 IsDeterministic]: Start isDeterministic. Operand 97802 states and 176311 transitions. [2022-11-20 12:01:24,616 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-20 12:01:24,616 INFO L218 hiAutomatonCegarLoop]: Abstraction has 97802 states and 176311 transitions. [2022-11-20 12:01:24,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97802 states and 176311 transitions. [2022-11-20 12:01:25,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97802 to 97794. [2022-11-20 12:01:25,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97794 states, 97794 states have (on average 1.802799762766632) internal successors, (176303), 97793 states have internal predecessors, (176303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:01:26,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97794 states to 97794 states and 176303 transitions. [2022-11-20 12:01:26,105 INFO L240 hiAutomatonCegarLoop]: Abstraction has 97794 states and 176303 transitions. [2022-11-20 12:01:26,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 12:01:26,106 INFO L428 stractBuchiCegarLoop]: Abstraction has 97794 states and 176303 transitions. [2022-11-20 12:01:26,106 INFO L335 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-11-20 12:01:26,106 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 97794 states and 176303 transitions.