./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f89a8ce65f650dd979d04d2db9dc53ba483e2a2b64be3f70ae15b036e4b11b5a --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 19:27:01,373 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 19:27:01,374 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 19:27:01,386 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 19:27:01,386 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 19:27:01,387 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 19:27:01,388 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 19:27:01,389 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 19:27:01,390 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 19:27:01,391 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 19:27:01,391 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 19:27:01,392 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 19:27:01,392 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 19:27:01,393 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 19:27:01,394 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 19:27:01,394 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 19:27:01,395 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 19:27:01,396 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 19:27:01,397 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 19:27:01,398 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 19:27:01,399 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 19:27:01,400 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 19:27:01,400 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 19:27:01,401 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 19:27:01,403 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 19:27:01,403 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 19:27:01,404 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 19:27:01,404 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 19:27:01,404 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 19:27:01,405 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 19:27:01,405 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 19:27:01,406 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 19:27:01,406 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 19:27:01,407 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 19:27:01,408 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 19:27:01,408 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 19:27:01,408 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 19:27:01,408 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 19:27:01,409 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 19:27:01,409 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 19:27:01,409 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 19:27:01,410 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-12-13 19:27:01,431 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 19:27:01,431 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 19:27:01,431 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 19:27:01,437 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 19:27:01,438 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 19:27:01,438 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 19:27:01,438 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 19:27:01,438 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-12-13 19:27:01,438 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-12-13 19:27:01,438 INFO L138 SettingsManager]: * Use old map elimination=false [2022-12-13 19:27:01,439 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-12-13 19:27:01,439 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-12-13 19:27:01,439 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-12-13 19:27:01,439 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 19:27:01,439 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 19:27:01,439 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-13 19:27:01,440 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 19:27:01,440 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 19:27:01,440 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 19:27:01,440 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-12-13 19:27:01,440 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-12-13 19:27:01,440 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-12-13 19:27:01,441 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 19:27:01,441 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 19:27:01,441 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-12-13 19:27:01,441 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 19:27:01,441 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-12-13 19:27:01,441 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 19:27:01,442 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 19:27:01,442 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 19:27:01,442 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 19:27:01,443 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-12-13 19:27:01,443 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f89a8ce65f650dd979d04d2db9dc53ba483e2a2b64be3f70ae15b036e4b11b5a [2022-12-13 19:27:01,655 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 19:27:01,675 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 19:27:01,678 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 19:27:01,679 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 19:27:01,679 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 19:27:01,680 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c [2022-12-13 19:27:04,251 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 19:27:04,470 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 19:27:04,471 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c [2022-12-13 19:27:04,485 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/data/79272541e/7c4863dd4ea6444089d97d45897c6fb2/FLAGb1162c4cd [2022-12-13 19:27:04,843 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/data/79272541e/7c4863dd4ea6444089d97d45897c6fb2 [2022-12-13 19:27:04,849 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 19:27:04,851 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 19:27:04,853 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 19:27:04,854 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 19:27:04,859 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 19:27:04,860 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 07:27:04" (1/1) ... [2022-12-13 19:27:04,861 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2b7dbc93 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:04, skipping insertion in model container [2022-12-13 19:27:04,861 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 07:27:04" (1/1) ... [2022-12-13 19:27:04,869 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 19:27:04,916 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 19:27:05,046 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c[1811,1824] [2022-12-13 19:27:05,245 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 19:27:05,256 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 19:27:05,265 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c[1811,1824] [2022-12-13 19:27:05,337 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 19:27:05,353 INFO L208 MainTranslator]: Completed translation [2022-12-13 19:27:05,354 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05 WrapperNode [2022-12-13 19:27:05,354 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 19:27:05,355 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 19:27:05,355 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 19:27:05,355 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 19:27:05,360 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:05,377 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:05,793 INFO L138 Inliner]: procedures = 92, calls = 344, calls flagged for inlining = 196, calls inlined = 1755, statements flattened = 63923 [2022-12-13 19:27:05,793 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 19:27:05,794 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 19:27:05,794 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 19:27:05,794 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 19:27:05,801 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:05,801 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:05,864 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:05,864 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:06,085 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:06,284 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:06,314 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:06,346 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:06,459 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 19:27:06,459 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 19:27:06,459 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 19:27:06,459 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 19:27:06,460 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (1/1) ... [2022-12-13 19:27:06,464 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 19:27:06,472 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 19:27:06,483 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 19:27:06,484 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-12-13 19:27:06,509 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 19:27:06,509 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 19:27:06,509 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 19:27:06,509 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 19:27:06,646 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 19:27:06,647 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 19:27:19,927 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 19:27:19,971 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 19:27:19,971 INFO L300 CfgBuilder]: Removed 61 assume(true) statements. [2022-12-13 19:27:19,982 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 07:27:19 BoogieIcfgContainer [2022-12-13 19:27:19,983 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 19:27:19,983 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-12-13 19:27:19,983 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-12-13 19:27:19,986 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-12-13 19:27:19,987 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 19:27:19,987 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.12 07:27:04" (1/3) ... [2022-12-13 19:27:19,987 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3bbec6a5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 07:27:19, skipping insertion in model container [2022-12-13 19:27:19,988 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 19:27:19,988 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 07:27:05" (2/3) ... [2022-12-13 19:27:19,988 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@3bbec6a5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 07:27:19, skipping insertion in model container [2022-12-13 19:27:19,988 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 19:27:19,988 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 07:27:19" (3/3) ... [2022-12-13 19:27:19,989 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product22.cil.c [2022-12-13 19:27:20,176 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-12-13 19:27:20,176 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-12-13 19:27:20,176 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-12-13 19:27:20,177 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-12-13 19:27:20,177 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-12-13 19:27:20,177 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-12-13 19:27:20,177 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-12-13 19:27:20,177 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-12-13 19:27:20,214 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 17392 states, 17391 states have (on average 1.8840204703582313) internal successors, (32765), 17391 states have internal predecessors, (32765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:20,391 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:20,391 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:20,391 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:20,397 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:20,398 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:20,398 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-12-13 19:27:20,422 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 17392 states, 17391 states have (on average 1.8840204703582313) internal successors, (32765), 17391 states have internal predecessors, (32765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:20,541 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:20,542 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:20,542 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:20,543 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:20,543 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:20,547 INFO L748 eck$LassoCheckResult]: Stem: 4461#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 4216#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 16038#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 15723#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 9226#valid_product_returnLabel#1true main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 16059#L3266true assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 10051#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 404#L2819true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 2327#getOrigin_returnLabel#1true aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3874#L2375true assume 0 == initPersonOnFloor_~floor#1; 15881#L2376true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 13617#L2483-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 7129#L2167true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 11142#L2179-2true assume { :end_inline_callOnFloor } true; 9537#initPersonOnFloor_returnLabel#1true assume { :end_inline_initPersonOnFloor } true; 15661#aliceCall_returnLabel#1true assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 2567#L2819-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 8937#getOrigin_returnLabel#2true angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7081#L2375-1true assume 0 == initPersonOnFloor_~floor#1; 10008#L2376-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 12635#L2483-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 16559#L2167-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4293#L2179-5true assume { :end_inline_callOnFloor } true; 3092#initPersonOnFloor_returnLabel#2true assume { :end_inline_initPersonOnFloor } true; 7072#angelinaCall_returnLabel#1true assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 6580#getCurrentHeading_returnLabel#1true __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 12003#__utac_acc__Specification13_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 13747#areDoorsOpen_returnLabel#1true timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 9420#L1647true assume 0 != timeShift_~tmp~14#1; 13554#L1648true assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 16840#L1647-1true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 12986#L3305true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 10166#L3306true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2434#L1867true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 7342#L1871-2true [2022-12-13 19:27:20,548 INFO L750 eck$LassoCheckResult]: Loop: 7342#L1871-2true assume !false; 71#L1872true assume existInLiftCallsInDirection_~i~0#1 < 5; 2741#L1873true assume !(0 == existInLiftCallsInDirection_~i~0#1); 882#$Ultimate##6932true assume !(1 == existInLiftCallsInDirection_~i~0#1); 3358#$Ultimate##6936true assume !(2 == existInLiftCallsInDirection_~i~0#1); 7262#$Ultimate##6940true assume !(3 == existInLiftCallsInDirection_~i~0#1); 6408#$Ultimate##6944true assume !(4 == existInLiftCallsInDirection_~i~0#1); 16539#L1914-1true existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 7342#L1871-2true [2022-12-13 19:27:20,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:20,552 INFO L85 PathProgramCache]: Analyzing trace with hash -1544398965, now seen corresponding path program 1 times [2022-12-13 19:27:20,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:20,559 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529365748] [2022-12-13 19:27:20,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:20,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:20,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:20,829 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:20,829 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:20,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529365748] [2022-12-13 19:27:20,830 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [529365748] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:20,830 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:20,830 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 19:27:20,831 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1386177128] [2022-12-13 19:27:20,832 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:20,835 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:20,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:20,836 INFO L85 PathProgramCache]: Analyzing trace with hash 1775462013, now seen corresponding path program 1 times [2022-12-13 19:27:20,836 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:20,836 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [80566692] [2022-12-13 19:27:20,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:20,837 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:20,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:20,841 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:20,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:20,857 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:20,902 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 19:27:20,903 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 19:27:20,903 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 19:27:20,903 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 19:27:20,903 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-12-13 19:27:20,903 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 19:27:20,903 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 19:27:20,903 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 19:27:20,903 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product22.cil.c_Iteration1_Loop [2022-12-13 19:27:20,903 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 19:27:20,903 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 19:27:20,918 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 19:27:20,967 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 19:27:20,967 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-12-13 19:27:20,969 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 19:27:20,969 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 19:27:20,970 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 19:27:20,971 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-12-13 19:27:20,972 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 19:27:20,973 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 19:27:20,989 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-12-13 19:27:20,989 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 19:27:20,989 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 19:27:20,990 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 19:27:20,991 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-12-13 19:27:20,992 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-12-13 19:27:20,992 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 19:27:21,013 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-12-13 19:27:21,016 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2022-12-13 19:27:21,016 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 19:27:21,016 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 19:27:21,016 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 19:27:21,016 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 19:27:21,016 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-12-13 19:27:21,017 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 19:27:21,017 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 19:27:21,017 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 19:27:21,017 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product22.cil.c_Iteration1_Loop [2022-12-13 19:27:21,017 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 19:27:21,017 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 19:27:21,018 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 19:27:21,053 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 19:27:21,058 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-12-13 19:27:21,059 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 19:27:21,059 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 19:27:21,060 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 19:27:21,061 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-12-13 19:27:21,062 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 19:27:21,073 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 19:27:21,073 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 19:27:21,074 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 19:27:21,074 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 19:27:21,074 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 19:27:21,076 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 19:27:21,076 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 19:27:21,079 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-12-13 19:27:21,083 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2022-12-13 19:27:21,083 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2022-12-13 19:27:21,086 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 19:27:21,087 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 19:27:21,123 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 19:27:21,124 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-12-13 19:27:21,125 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-12-13 19:27:21,125 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-12-13 19:27:21,126 INFO L513 LassoAnalysis]: Proved termination. [2022-12-13 19:27:21,126 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2022-12-13 19:27:21,129 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2022-12-13 19:27:21,132 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-12-13 19:27:21,150 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:21,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:21,234 INFO L263 TraceCheckSpWp]: Trace formula consists of 543 conjuncts, 2 conjunts are in the unsatisfiable core [2022-12-13 19:27:21,235 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 19:27:21,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:21,287 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-13 19:27:21,288 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 19:27:21,429 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:21,458 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2022-12-13 19:27:21,486 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 17392 states, 17391 states have (on average 1.8840204703582313) internal successors, (32765), 17391 states have internal predecessors, (32765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:22,507 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_685340fc-cabe-4f0a-9615-a517be8e9a10/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2022-12-13 19:27:27,270 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 17392 states, 17391 states have (on average 1.8840204703582313) internal successors, (32765), 17391 states have internal predecessors, (32765), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 204458 states and 385081 transitions. Complement of second has 18 states. [2022-12-13 19:27:27,273 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2022-12-13 19:27:27,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:27,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 208931 transitions. [2022-12-13 19:27:27,415 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 208931 transitions. Stem has 34 letters. Loop has 8 letters. [2022-12-13 19:27:27,416 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 19:27:27,416 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 208931 transitions. Stem has 42 letters. Loop has 8 letters. [2022-12-13 19:27:27,417 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 19:27:27,417 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 208931 transitions. Stem has 34 letters. Loop has 16 letters. [2022-12-13 19:27:27,417 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 19:27:27,418 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 204458 states and 385081 transitions. [2022-12-13 19:27:28,268 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 27864 [2022-12-13 19:27:28,640 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 204458 states to 110811 states and 208654 transitions. [2022-12-13 19:27:28,641 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 110781 [2022-12-13 19:27:28,717 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 110782 [2022-12-13 19:27:28,717 INFO L73 IsDeterministic]: Start isDeterministic. Operand 110811 states and 208654 transitions. [2022-12-13 19:27:28,718 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:28,718 INFO L218 hiAutomatonCegarLoop]: Abstraction has 110811 states and 208654 transitions. [2022-12-13 19:27:28,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110811 states and 208654 transitions. [2022-12-13 19:27:29,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110811 to 31274. [2022-12-13 19:27:29,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31274 states, 31274 states have (on average 1.8800601138325765) internal successors, (58797), 31273 states have internal predecessors, (58797), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:29,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31274 states to 31274 states and 58797 transitions. [2022-12-13 19:27:29,506 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31274 states and 58797 transitions. [2022-12-13 19:27:29,506 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:29,508 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 19:27:29,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 19:27:29,510 INFO L87 Difference]: Start difference. First operand 31274 states and 58797 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:30,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:30,399 INFO L93 Difference]: Finished difference Result 45181 states and 84793 transitions. [2022-12-13 19:27:30,399 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45181 states and 84793 transitions. [2022-12-13 19:27:30,582 INFO L131 ngComponentsAnalysis]: Automaton has 78 accepting balls. 15034 [2022-12-13 19:27:30,717 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45181 states to 45168 states and 84780 transitions. [2022-12-13 19:27:30,717 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 45149 [2022-12-13 19:27:30,764 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 45149 [2022-12-13 19:27:30,764 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45168 states and 84780 transitions. [2022-12-13 19:27:30,813 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:30,813 INFO L218 hiAutomatonCegarLoop]: Abstraction has 45168 states and 84780 transitions. [2022-12-13 19:27:30,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45168 states and 84780 transitions. [2022-12-13 19:27:31,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45168 to 17389. [2022-12-13 19:27:31,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17389 states, 17389 states have (on average 1.8769912013341767) internal successors, (32639), 17388 states have internal predecessors, (32639), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:31,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17389 states to 17389 states and 32639 transitions. [2022-12-13 19:27:31,212 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17389 states and 32639 transitions. [2022-12-13 19:27:31,212 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 19:27:31,213 INFO L428 stractBuchiCegarLoop]: Abstraction has 17389 states and 32639 transitions. [2022-12-13 19:27:31,213 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-12-13 19:27:31,213 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17389 states and 32639 transitions. [2022-12-13 19:27:31,278 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:31,278 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:31,278 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:31,280 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:31,280 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:31,281 INFO L748 eck$LassoCheckResult]: Stem: 307231#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 306883#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 306884#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 315715#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 312562#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 312563#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 313233#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 299527#L2819 assume !(0 == getOrigin_~person#1); 299528#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 303653#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 303654#L2375 assume 0 == initPersonOnFloor_~floor#1; 306343#L2376 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 298840#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 310581#L2167 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 304420#L2179-2 assume { :end_inline_callOnFloor } true; 312841#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 312842#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 304111#L2819-1 assume !(0 == getOrigin_~person#1); 304112#L2823-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 308649#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 310534#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 310535#L2376-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 298968#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 314767#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 306987#L2179-5 assume { :end_inline_callOnFloor } true; 305075#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 305076#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 309995#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 309996#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 314455#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 312742#L1647 assume 0 != timeShift_~tmp~14#1; 312743#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 314809#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 314912#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 313307#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 303854#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 303855#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 302101#L1937-2 [2022-12-13 19:27:31,281 INFO L750 eck$LassoCheckResult]: Loop: 302101#L1937-2 assume !false; 302102#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 303759#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 305734#L1946-2 assume !false; 304945#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 304947#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 302101#L1937-2 [2022-12-13 19:27:31,281 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:31,281 INFO L85 PathProgramCache]: Analyzing trace with hash 1440334859, now seen corresponding path program 1 times [2022-12-13 19:27:31,282 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:31,282 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605879049] [2022-12-13 19:27:31,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:31,282 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:31,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:31,438 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:31,439 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:31,439 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605879049] [2022-12-13 19:27:31,439 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605879049] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:31,439 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:31,439 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 19:27:31,440 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1383705060] [2022-12-13 19:27:31,440 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:31,440 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:31,441 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:31,441 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 1 times [2022-12-13 19:27:31,441 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:31,441 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1114863250] [2022-12-13 19:27:31,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:31,442 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:31,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:31,447 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:31,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:31,454 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:31,483 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:31,484 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 19:27:31,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 19:27:31,485 INFO L87 Difference]: Start difference. First operand 17389 states and 32639 transitions. cyclomatic complexity: 15284 Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:32,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:32,374 INFO L93 Difference]: Finished difference Result 51950 states and 97487 transitions. [2022-12-13 19:27:32,374 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 51950 states and 97487 transitions. [2022-12-13 19:27:32,550 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 11892 [2022-12-13 19:27:32,684 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 51950 states to 51950 states and 97487 transitions. [2022-12-13 19:27:32,684 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51893 [2022-12-13 19:27:32,718 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51893 [2022-12-13 19:27:32,718 INFO L73 IsDeterministic]: Start isDeterministic. Operand 51950 states and 97487 transitions. [2022-12-13 19:27:32,718 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:32,719 INFO L218 hiAutomatonCegarLoop]: Abstraction has 51950 states and 97487 transitions. [2022-12-13 19:27:32,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51950 states and 97487 transitions. [2022-12-13 19:27:32,985 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51950 to 17404. [2022-12-13 19:27:33,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17404 states, 17404 states have (on average 1.876235348195817) internal successors, (32654), 17403 states have internal predecessors, (32654), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:33,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17404 states to 17404 states and 32654 transitions. [2022-12-13 19:27:33,029 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17404 states and 32654 transitions. [2022-12-13 19:27:33,030 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 19:27:33,030 INFO L428 stractBuchiCegarLoop]: Abstraction has 17404 states and 32654 transitions. [2022-12-13 19:27:33,031 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-12-13 19:27:33,031 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17404 states and 32654 transitions. [2022-12-13 19:27:33,075 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:33,076 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:33,076 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:33,076 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:33,076 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:33,077 INFO L748 eck$LassoCheckResult]: Stem: 376573#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 376224#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 376225#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 385064#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 381906#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 381907#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 382579#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 368875#L2819 assume !(0 == getOrigin_~person#1); 368876#L2823 assume !(1 == getOrigin_~person#1); 377398#L2827 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 377399#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 385228#L2375 assume 0 == initPersonOnFloor_~floor#1; 385089#L2376 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 368185#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 379925#L2167 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 373764#L2179-2 assume { :end_inline_callOnFloor } true; 382186#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 382187#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 373455#L2819-1 assume !(0 == getOrigin_~person#1); 373456#L2823-1 assume !(1 == getOrigin_~person#1); 377993#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 380006#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 385224#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 382548#L2376-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 368316#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 384113#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 376328#L2179-5 assume { :end_inline_callOnFloor } true; 374417#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 374418#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 379338#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 379339#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 383801#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 382087#L1647 assume 0 != timeShift_~tmp~14#1; 382088#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 384154#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 384258#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 382653#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 373199#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 373200#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 371446#L1937-2 [2022-12-13 19:27:33,077 INFO L750 eck$LassoCheckResult]: Loop: 371446#L1937-2 assume !false; 371447#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 373102#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 375075#L1946-2 assume !false; 374289#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 374291#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 371446#L1937-2 [2022-12-13 19:27:33,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:33,077 INFO L85 PathProgramCache]: Analyzing trace with hash 920334271, now seen corresponding path program 1 times [2022-12-13 19:27:33,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:33,077 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [438529075] [2022-12-13 19:27:33,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:33,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:33,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:33,118 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:33,119 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:33,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [438529075] [2022-12-13 19:27:33,119 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [438529075] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:33,119 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:33,119 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 19:27:33,119 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [181518958] [2022-12-13 19:27:33,119 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:33,120 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:33,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:33,120 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 2 times [2022-12-13 19:27:33,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:33,120 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2097343159] [2022-12-13 19:27:33,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:33,121 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:33,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:33,125 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:33,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:33,130 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:33,147 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:33,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 19:27:33,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 19:27:33,147 INFO L87 Difference]: Start difference. First operand 17404 states and 32654 transitions. cyclomatic complexity: 15284 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:33,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:33,544 INFO L93 Difference]: Finished difference Result 34629 states and 64981 transitions. [2022-12-13 19:27:33,544 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34629 states and 64981 transitions. [2022-12-13 19:27:33,655 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 7928 [2022-12-13 19:27:33,738 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34629 states to 34629 states and 64981 transitions. [2022-12-13 19:27:33,738 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34591 [2022-12-13 19:27:33,760 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34591 [2022-12-13 19:27:33,760 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34629 states and 64981 transitions. [2022-12-13 19:27:33,782 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:33,782 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34629 states and 64981 transitions. [2022-12-13 19:27:33,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34629 states and 64981 transitions. [2022-12-13 19:27:33,966 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34629 to 17370. [2022-12-13 19:27:33,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17370 states, 17370 states have (on average 1.875993091537133) internal successors, (32586), 17369 states have internal predecessors, (32586), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:34,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17370 states to 17370 states and 32586 transitions. [2022-12-13 19:27:34,010 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17370 states and 32586 transitions. [2022-12-13 19:27:34,011 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 19:27:34,011 INFO L428 stractBuchiCegarLoop]: Abstraction has 17370 states and 32586 transitions. [2022-12-13 19:27:34,011 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-12-13 19:27:34,012 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17370 states and 32586 transitions. [2022-12-13 19:27:34,054 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:34,055 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:34,055 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:34,055 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:34,055 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:34,056 INFO L748 eck$LassoCheckResult]: Stem: 428604#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 428255#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 428256#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 437075#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 433925#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 433926#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 434596#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 420911#L2819 assume !(0 == getOrigin_~person#1); 420912#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 425030#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 425031#L2375 assume !(0 == initPersonOnFloor_~floor#1); 421850#L2402 assume !(1 == initPersonOnFloor_~floor#1); 421851#L2429 assume !(2 == initPersonOnFloor_~floor#1); 424765#L2456 assume 3 == initPersonOnFloor_~floor#1; 424766#L2457 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 434169#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 431946#L2167 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 425796#L2179-2 assume { :end_inline_callOnFloor } true; 434204#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 434205#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 425487#L2819-1 assume !(0 == getOrigin_~person#1); 425488#L2823-1 assume !(1 == getOrigin_~person#1); 430019#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 432027#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 437233#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 434565#L2376-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 420352#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 436127#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 428359#L2179-5 assume { :end_inline_callOnFloor } true; 426451#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 426452#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 431362#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 431363#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 435816#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 434104#L1647 assume 0 != timeShift_~tmp~14#1; 434105#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 436169#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 436271#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 434670#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 425231#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 425232#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 423481#L1937-2 [2022-12-13 19:27:34,056 INFO L750 eck$LassoCheckResult]: Loop: 423481#L1937-2 assume !false; 423482#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 425136#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 427108#L1946-2 assume !false; 426321#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 426323#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 423481#L1937-2 [2022-12-13 19:27:34,056 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:34,056 INFO L85 PathProgramCache]: Analyzing trace with hash -89409166, now seen corresponding path program 1 times [2022-12-13 19:27:34,056 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:34,056 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1620464765] [2022-12-13 19:27:34,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:34,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:34,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:34,125 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:34,125 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:34,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1620464765] [2022-12-13 19:27:34,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1620464765] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:34,125 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:34,125 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 19:27:34,126 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [374352435] [2022-12-13 19:27:34,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:34,126 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:34,126 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:34,126 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 3 times [2022-12-13 19:27:34,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:34,127 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1235943001] [2022-12-13 19:27:34,127 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:34,127 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:34,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:34,131 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:34,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:34,136 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:34,150 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:34,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 19:27:34,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 19:27:34,151 INFO L87 Difference]: Start difference. First operand 17370 states and 32586 transitions. cyclomatic complexity: 15250 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:34,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:34,643 INFO L93 Difference]: Finished difference Result 24290 states and 45566 transitions. [2022-12-13 19:27:34,643 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24290 states and 45566 transitions. [2022-12-13 19:27:34,708 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 7564 [2022-12-13 19:27:34,760 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24290 states to 24290 states and 45566 transitions. [2022-12-13 19:27:34,760 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24271 [2022-12-13 19:27:34,774 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24271 [2022-12-13 19:27:34,774 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24290 states and 45566 transitions. [2022-12-13 19:27:34,776 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:34,776 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24290 states and 45566 transitions. [2022-12-13 19:27:34,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24290 states and 45566 transitions. [2022-12-13 19:27:34,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24290 to 17370. [2022-12-13 19:27:34,944 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17370 states, 17370 states have (on average 1.8756476683937824) internal successors, (32580), 17369 states have internal predecessors, (32580), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:34,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17370 states to 17370 states and 32580 transitions. [2022-12-13 19:27:34,973 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17370 states and 32580 transitions. [2022-12-13 19:27:34,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 19:27:34,974 INFO L428 stractBuchiCegarLoop]: Abstraction has 17370 states and 32580 transitions. [2022-12-13 19:27:34,975 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-12-13 19:27:34,975 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17370 states and 32580 transitions. [2022-12-13 19:27:35,020 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:35,020 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:35,020 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:35,020 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:35,020 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:35,021 INFO L748 eck$LassoCheckResult]: Stem: 470277#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 469928#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 469929#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 478749#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 475599#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 475600#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 476270#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 462584#L2819 assume !(0 == getOrigin_~person#1); 462585#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 466703#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 466704#L2375 assume !(0 == initPersonOnFloor_~floor#1); 463523#L2402 assume !(1 == initPersonOnFloor_~floor#1); 463524#L2429 assume !(2 == initPersonOnFloor_~floor#1); 466435#L2456 assume 3 == initPersonOnFloor_~floor#1; 466436#L2457 assume !(0 == initPersonOnFloor_~person#1); 478337#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 475842#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 473619#L2167 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 467469#L2179-2 assume { :end_inline_callOnFloor } true; 475878#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 475879#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 467160#L2819-1 assume !(0 == getOrigin_~person#1); 467161#L2823-1 assume !(1 == getOrigin_~person#1); 471692#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 473700#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 475378#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 476239#L2376-2 assume !(0 == initPersonOnFloor_~person#1); 476240#L2379-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 462025#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 477801#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 470032#L2179-5 assume { :end_inline_callOnFloor } true; 468124#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 468125#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 473033#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 473034#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 477490#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 475778#L1647 assume 0 != timeShift_~tmp~14#1; 475779#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 477843#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 477945#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 476344#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 466904#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 466905#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 465153#L1937-2 [2022-12-13 19:27:35,021 INFO L750 eck$LassoCheckResult]: Loop: 465153#L1937-2 assume !false; 465154#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 466807#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 468779#L1946-2 assume !false; 467994#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 467996#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 465153#L1937-2 [2022-12-13 19:27:35,021 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:35,021 INFO L85 PathProgramCache]: Analyzing trace with hash 132035382, now seen corresponding path program 1 times [2022-12-13 19:27:35,021 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:35,021 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1837183330] [2022-12-13 19:27:35,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:35,022 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:35,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:35,071 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:35,071 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:35,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1837183330] [2022-12-13 19:27:35,071 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1837183330] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:35,072 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:35,072 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 19:27:35,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [855923299] [2022-12-13 19:27:35,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:35,072 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:35,073 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:35,073 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 4 times [2022-12-13 19:27:35,073 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:35,073 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [337312925] [2022-12-13 19:27:35,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:35,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:35,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:35,076 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:35,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:35,080 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:35,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:35,094 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 19:27:35,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 19:27:35,094 INFO L87 Difference]: Start difference. First operand 17370 states and 32580 transitions. cyclomatic complexity: 15244 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:35,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:35,809 INFO L93 Difference]: Finished difference Result 51909 states and 97401 transitions. [2022-12-13 19:27:35,809 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 51909 states and 97401 transitions. [2022-12-13 19:27:35,973 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 11892 [2022-12-13 19:27:36,099 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 51909 states to 51909 states and 97401 transitions. [2022-12-13 19:27:36,100 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51852 [2022-12-13 19:27:36,128 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51852 [2022-12-13 19:27:36,128 INFO L73 IsDeterministic]: Start isDeterministic. Operand 51909 states and 97401 transitions. [2022-12-13 19:27:36,134 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:36,134 INFO L218 hiAutomatonCegarLoop]: Abstraction has 51909 states and 97401 transitions. [2022-12-13 19:27:36,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51909 states and 97401 transitions. [2022-12-13 19:27:36,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51909 to 17374. [2022-12-13 19:27:36,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17374 states, 17374 states have (on average 1.8753885115690112) internal successors, (32583), 17373 states have internal predecessors, (32583), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:36,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17374 states to 17374 states and 32583 transitions. [2022-12-13 19:27:36,397 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17374 states and 32583 transitions. [2022-12-13 19:27:36,397 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 19:27:36,398 INFO L428 stractBuchiCegarLoop]: Abstraction has 17374 states and 32583 transitions. [2022-12-13 19:27:36,398 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-12-13 19:27:36,398 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17374 states and 32583 transitions. [2022-12-13 19:27:36,440 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:36,440 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:36,441 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:36,441 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:36,441 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:36,441 INFO L748 eck$LassoCheckResult]: Stem: 539567#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 539218#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 539219#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 548038#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 544888#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 544889#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 545559#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 531872#L2819 assume !(0 == getOrigin_~person#1); 531873#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 535992#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 535993#L2375 assume !(0 == initPersonOnFloor_~floor#1); 532811#L2402 assume !(1 == initPersonOnFloor_~floor#1); 532812#L2429 assume !(2 == initPersonOnFloor_~floor#1); 535724#L2456 assume 3 == initPersonOnFloor_~floor#1; 535725#L2457 assume !(0 == initPersonOnFloor_~person#1); 547626#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 545131#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 542909#L2167 assume !(0 == callOnFloor_~floorID#1); 536757#L2170 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 536758#L2179-2 assume { :end_inline_callOnFloor } true; 545167#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 545168#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 536449#L2819-1 assume !(0 == getOrigin_~person#1); 536450#L2823-1 assume !(1 == getOrigin_~person#1); 540982#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 542990#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 548195#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 545528#L2376-2 assume !(0 == initPersonOnFloor_~person#1); 545529#L2379-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 538547#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 547090#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 539322#L2179-5 assume { :end_inline_callOnFloor } true; 537413#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 537414#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 542323#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 542324#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 546779#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 545067#L1647 assume 0 != timeShift_~tmp~14#1; 545068#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 547132#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 547234#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 545633#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 536193#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 536194#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 534442#L1937-2 [2022-12-13 19:27:36,441 INFO L750 eck$LassoCheckResult]: Loop: 534442#L1937-2 assume !false; 534443#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 536096#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 538068#L1946-2 assume !false; 537283#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 537285#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 534442#L1937-2 [2022-12-13 19:27:36,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:36,442 INFO L85 PathProgramCache]: Analyzing trace with hash -1673489519, now seen corresponding path program 1 times [2022-12-13 19:27:36,442 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:36,442 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [327646053] [2022-12-13 19:27:36,442 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:36,442 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:36,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:36,507 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:36,507 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:36,507 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [327646053] [2022-12-13 19:27:36,507 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [327646053] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:36,507 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:36,507 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 19:27:36,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1264645047] [2022-12-13 19:27:36,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:36,508 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:36,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:36,508 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 5 times [2022-12-13 19:27:36,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:36,508 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1595412531] [2022-12-13 19:27:36,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:36,508 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:36,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:36,511 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:36,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:36,513 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:36,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:36,528 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 19:27:36,528 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 19:27:36,529 INFO L87 Difference]: Start difference. First operand 17374 states and 32583 transitions. cyclomatic complexity: 15243 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:37,433 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:37,433 INFO L93 Difference]: Finished difference Result 51914 states and 97403 transitions. [2022-12-13 19:27:37,434 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 51914 states and 97403 transitions. [2022-12-13 19:27:37,667 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 11892 [2022-12-13 19:27:37,835 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 51914 states to 51914 states and 97403 transitions. [2022-12-13 19:27:37,835 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51857 [2022-12-13 19:27:37,872 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51857 [2022-12-13 19:27:37,872 INFO L73 IsDeterministic]: Start isDeterministic. Operand 51914 states and 97403 transitions. [2022-12-13 19:27:37,872 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:37,872 INFO L218 hiAutomatonCegarLoop]: Abstraction has 51914 states and 97403 transitions. [2022-12-13 19:27:37,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51914 states and 97403 transitions. [2022-12-13 19:27:38,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51914 to 17380. [2022-12-13 19:27:38,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17380 states, 17380 states have (on average 1.8750287686996547) internal successors, (32588), 17379 states have internal predecessors, (32588), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:38,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17380 states to 17380 states and 32588 transitions. [2022-12-13 19:27:38,228 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17380 states and 32588 transitions. [2022-12-13 19:27:38,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 19:27:38,230 INFO L428 stractBuchiCegarLoop]: Abstraction has 17380 states and 32588 transitions. [2022-12-13 19:27:38,230 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-12-13 19:27:38,230 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17380 states and 32588 transitions. [2022-12-13 19:27:38,288 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:38,288 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:38,288 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:38,289 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:38,289 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:38,289 INFO L748 eck$LassoCheckResult]: Stem: 608864#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 608515#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 608516#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 617337#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 614187#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 614188#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 614858#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 601169#L2819 assume !(0 == getOrigin_~person#1); 601170#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 605290#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 605291#L2375 assume !(0 == initPersonOnFloor_~floor#1); 602109#L2402 assume !(1 == initPersonOnFloor_~floor#1); 602110#L2429 assume !(2 == initPersonOnFloor_~floor#1); 605022#L2456 assume 3 == initPersonOnFloor_~floor#1; 605023#L2457 assume !(0 == initPersonOnFloor_~person#1); 616925#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 614430#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 612207#L2167 assume !(0 == callOnFloor_~floorID#1); 606055#L2170 assume !(1 == callOnFloor_~floorID#1); 606056#L2173 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 613136#L2179-2 assume { :end_inline_callOnFloor } true; 614466#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 614467#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 605747#L2819-1 assume !(0 == getOrigin_~person#1); 605748#L2823-1 assume !(1 == getOrigin_~person#1); 610280#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 612288#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 617496#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 614827#L2376-2 assume !(0 == initPersonOnFloor_~person#1); 614828#L2379-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 607844#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 617503#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 608619#L2179-5 assume { :end_inline_callOnFloor } true; 606708#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 606709#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 611621#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 611622#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 616078#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 614366#L1647 assume 0 != timeShift_~tmp~14#1; 614367#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 616430#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 616533#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 614932#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 605491#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 605492#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 603740#L1937-2 [2022-12-13 19:27:38,290 INFO L750 eck$LassoCheckResult]: Loop: 603740#L1937-2 assume !false; 603741#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 605394#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 607365#L1946-2 assume !false; 606580#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 606582#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 603740#L1937-2 [2022-12-13 19:27:38,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:38,290 INFO L85 PathProgramCache]: Analyzing trace with hash -1655087567, now seen corresponding path program 1 times [2022-12-13 19:27:38,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:38,290 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [368925683] [2022-12-13 19:27:38,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:38,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:38,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:38,339 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:38,339 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:38,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [368925683] [2022-12-13 19:27:38,339 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [368925683] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:38,339 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:38,339 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 19:27:38,339 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [150756414] [2022-12-13 19:27:38,339 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:38,340 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:38,340 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:38,340 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 6 times [2022-12-13 19:27:38,340 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:38,340 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [372741806] [2022-12-13 19:27:38,340 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:38,340 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:38,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:38,343 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:38,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:38,346 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:38,360 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:38,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 19:27:38,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 19:27:38,360 INFO L87 Difference]: Start difference. First operand 17380 states and 32588 transitions. cyclomatic complexity: 15242 Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:39,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:39,198 INFO L93 Difference]: Finished difference Result 51921 states and 97407 transitions. [2022-12-13 19:27:39,198 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 51921 states and 97407 transitions. [2022-12-13 19:27:39,430 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 11892 [2022-12-13 19:27:39,547 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 51921 states to 51921 states and 97407 transitions. [2022-12-13 19:27:39,547 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51864 [2022-12-13 19:27:39,573 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51864 [2022-12-13 19:27:39,573 INFO L73 IsDeterministic]: Start isDeterministic. Operand 51921 states and 97407 transitions. [2022-12-13 19:27:39,580 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:39,580 INFO L218 hiAutomatonCegarLoop]: Abstraction has 51921 states and 97407 transitions. [2022-12-13 19:27:39,609 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51921 states and 97407 transitions. [2022-12-13 19:27:39,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51921 to 17388. [2022-12-13 19:27:39,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17388 states, 17388 states have (on average 1.874568668046929) internal successors, (32595), 17387 states have internal predecessors, (32595), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:39,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17388 states to 17388 states and 32595 transitions. [2022-12-13 19:27:39,838 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17388 states and 32595 transitions. [2022-12-13 19:27:39,839 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 19:27:39,839 INFO L428 stractBuchiCegarLoop]: Abstraction has 17388 states and 32595 transitions. [2022-12-13 19:27:39,840 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-12-13 19:27:39,840 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17388 states and 32595 transitions. [2022-12-13 19:27:39,883 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:39,883 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:39,883 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:39,883 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:39,883 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:39,884 INFO L748 eck$LassoCheckResult]: Stem: 678175#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 677825#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 677826#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 686651#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 683500#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 683501#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 684171#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 670479#L2819 assume !(0 == getOrigin_~person#1); 670480#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 674600#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 674601#L2375 assume !(0 == initPersonOnFloor_~floor#1); 671419#L2402 assume !(1 == initPersonOnFloor_~floor#1); 671420#L2429 assume !(2 == initPersonOnFloor_~floor#1); 674332#L2456 assume 3 == initPersonOnFloor_~floor#1; 674333#L2457 assume !(0 == initPersonOnFloor_~person#1); 686239#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 683743#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 681519#L2167 assume !(0 == callOnFloor_~floorID#1); 675365#L2170 assume !(1 == callOnFloor_~floorID#1); 675366#L2173 assume !(2 == callOnFloor_~floorID#1); 684443#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 682448#L2179-2 assume { :end_inline_callOnFloor } true; 683779#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 683780#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 675057#L2819-1 assume !(0 == getOrigin_~person#1); 675058#L2823-1 assume !(1 == getOrigin_~person#1); 679591#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 681600#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 686808#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 684140#L2376-2 assume !(0 == initPersonOnFloor_~person#1); 684141#L2379-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 677154#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 686819#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 677929#L2179-5 assume { :end_inline_callOnFloor } true; 676020#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 676021#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 680935#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 680936#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 685391#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 683679#L1647 assume 0 != timeShift_~tmp~14#1; 683680#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 685745#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 685847#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 684245#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 674801#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 674802#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 673049#L1937-2 [2022-12-13 19:27:39,884 INFO L750 eck$LassoCheckResult]: Loop: 673049#L1937-2 assume !false; 673050#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 674704#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 676677#L1946-2 assume !false; 675890#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 675892#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 673049#L1937-2 [2022-12-13 19:27:39,884 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:39,884 INFO L85 PathProgramCache]: Analyzing trace with hash -929528020, now seen corresponding path program 1 times [2022-12-13 19:27:39,884 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:39,884 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [533444596] [2022-12-13 19:27:39,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:39,885 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:39,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:39,944 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:39,944 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:39,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [533444596] [2022-12-13 19:27:39,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [533444596] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:39,945 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:39,945 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 19:27:39,945 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1768830068] [2022-12-13 19:27:39,945 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:39,945 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:39,946 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:39,946 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 7 times [2022-12-13 19:27:39,946 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:39,946 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825869240] [2022-12-13 19:27:39,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:39,946 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:39,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:39,949 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:39,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:39,952 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:39,966 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:39,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 19:27:39,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 19:27:39,967 INFO L87 Difference]: Start difference. First operand 17388 states and 32595 transitions. cyclomatic complexity: 15241 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:40,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:40,558 INFO L93 Difference]: Finished difference Result 38204 states and 71648 transitions. [2022-12-13 19:27:40,558 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38204 states and 71648 transitions. [2022-12-13 19:27:40,682 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 14764 [2022-12-13 19:27:40,775 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38204 states to 38204 states and 71648 transitions. [2022-12-13 19:27:40,775 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38185 [2022-12-13 19:27:40,800 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38185 [2022-12-13 19:27:40,801 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38204 states and 71648 transitions. [2022-12-13 19:27:40,803 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:40,803 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38204 states and 71648 transitions. [2022-12-13 19:27:40,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38204 states and 71648 transitions. [2022-12-13 19:27:41,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38204 to 17374. [2022-12-13 19:27:41,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17374 states, 17374 states have (on average 1.8745827097962473) internal successors, (32569), 17373 states have internal predecessors, (32569), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:41,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17374 states to 17374 states and 32569 transitions. [2022-12-13 19:27:41,045 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17374 states and 32569 transitions. [2022-12-13 19:27:41,046 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 19:27:41,047 INFO L428 stractBuchiCegarLoop]: Abstraction has 17374 states and 32569 transitions. [2022-12-13 19:27:41,047 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-12-13 19:27:41,047 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17374 states and 32569 transitions. [2022-12-13 19:27:41,090 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:41,090 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:41,090 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:41,090 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:41,090 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:41,091 INFO L748 eck$LassoCheckResult]: Stem: 733782#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 733433#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 733434#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 742249#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 739103#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 739104#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 739771#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 726087#L2819 assume !(0 == getOrigin_~person#1); 726088#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 730209#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 730210#L2375 assume !(0 == initPersonOnFloor_~floor#1); 727027#L2402 assume !(1 == initPersonOnFloor_~floor#1); 727028#L2429 assume !(2 == initPersonOnFloor_~floor#1); 729941#L2456 assume 3 == initPersonOnFloor_~floor#1; 729942#L2457 assume !(0 == initPersonOnFloor_~person#1); 741837#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 739346#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 737123#L2167 assume !(0 == callOnFloor_~floorID#1); 730974#L2170 assume !(1 == callOnFloor_~floorID#1); 730975#L2173 assume !(2 == callOnFloor_~floorID#1); 740043#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 738052#L2179-2 assume { :end_inline_callOnFloor } true; 739382#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 739383#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 730666#L2819-1 assume !(0 == getOrigin_~person#1); 730667#L2823-1 assume !(1 == getOrigin_~person#1); 735197#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 737204#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 737077#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 732943#L2402-1 assume 1 == initPersonOnFloor_~floor#1; 732944#L2403-2 assume !(0 == initPersonOnFloor_~person#1); 733552#L2406-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 726600#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 742407#L2167-2 assume !(0 == callOnFloor_~floorID#1); 742404#L2170-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 733537#L2179-5 assume { :end_inline_callOnFloor } true; 731629#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 731630#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 736538#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 736539#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 740990#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 739282#L1647 assume 0 != timeShift_~tmp~14#1; 739283#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 741343#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 741445#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 739845#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 730410#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 730411#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 728658#L1937-2 [2022-12-13 19:27:41,091 INFO L750 eck$LassoCheckResult]: Loop: 728658#L1937-2 assume !false; 728659#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 730313#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 732285#L1946-2 assume !false; 731499#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 731501#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 728658#L1937-2 [2022-12-13 19:27:41,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:41,091 INFO L85 PathProgramCache]: Analyzing trace with hash 897706626, now seen corresponding path program 1 times [2022-12-13 19:27:41,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:41,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2129890693] [2022-12-13 19:27:41,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:41,092 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:41,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:41,148 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:41,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:41,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2129890693] [2022-12-13 19:27:41,148 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2129890693] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:41,148 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:41,149 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 19:27:41,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1008764062] [2022-12-13 19:27:41,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:41,149 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:41,149 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:41,149 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 8 times [2022-12-13 19:27:41,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:41,150 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2091225788] [2022-12-13 19:27:41,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:41,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:41,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:41,153 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:41,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:41,156 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:41,171 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:41,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 19:27:41,171 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 19:27:41,171 INFO L87 Difference]: Start difference. First operand 17374 states and 32569 transitions. cyclomatic complexity: 15229 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:41,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:41,781 INFO L93 Difference]: Finished difference Result 38178 states and 71599 transitions. [2022-12-13 19:27:41,781 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38178 states and 71599 transitions. [2022-12-13 19:27:41,905 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 14764 [2022-12-13 19:27:41,997 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38178 states to 38178 states and 71599 transitions. [2022-12-13 19:27:41,998 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38159 [2022-12-13 19:27:42,023 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38159 [2022-12-13 19:27:42,023 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38178 states and 71599 transitions. [2022-12-13 19:27:42,023 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:42,023 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38178 states and 71599 transitions. [2022-12-13 19:27:42,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38178 states and 71599 transitions. [2022-12-13 19:27:42,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38178 to 17368. [2022-12-13 19:27:42,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17368 states, 17368 states have (on average 1.8744818056195303) internal successors, (32556), 17367 states have internal predecessors, (32556), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:42,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17368 states to 17368 states and 32556 transitions. [2022-12-13 19:27:42,257 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17368 states and 32556 transitions. [2022-12-13 19:27:42,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 19:27:42,258 INFO L428 stractBuchiCegarLoop]: Abstraction has 17368 states and 32556 transitions. [2022-12-13 19:27:42,258 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-12-13 19:27:42,258 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17368 states and 32556 transitions. [2022-12-13 19:27:42,302 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:42,302 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:42,302 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:42,302 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:42,302 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:42,303 INFO L748 eck$LassoCheckResult]: Stem: 789342#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 788994#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 788995#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 797815#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 794664#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 794665#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 795333#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 781655#L2819 assume !(0 == getOrigin_~person#1); 781656#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 785772#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 785773#L2375 assume !(0 == initPersonOnFloor_~floor#1); 782592#L2402 assume !(1 == initPersonOnFloor_~floor#1); 782593#L2429 assume !(2 == initPersonOnFloor_~floor#1); 785504#L2456 assume 3 == initPersonOnFloor_~floor#1; 785505#L2457 assume !(0 == initPersonOnFloor_~person#1); 797402#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 794907#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 792683#L2167 assume !(0 == callOnFloor_~floorID#1); 786537#L2170 assume !(1 == callOnFloor_~floorID#1); 786538#L2173 assume !(2 == callOnFloor_~floorID#1); 795605#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 793611#L2179-2 assume { :end_inline_callOnFloor } true; 794943#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 794944#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 786229#L2819-1 assume !(0 == getOrigin_~person#1); 786230#L2823-1 assume !(1 == getOrigin_~person#1); 790756#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 792764#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 792637#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 788503#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 788504#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 785065#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 785066#L2433-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 781096#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 796866#L2167-2 assume !(0 == callOnFloor_~floorID#1); 796751#L2170-2 assume !(1 == callOnFloor_~floorID#1); 796752#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 789098#L2179-5 assume { :end_inline_callOnFloor } true; 787189#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 787190#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 792097#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 792098#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 796553#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 794843#L1647 assume 0 != timeShift_~tmp~14#1; 794844#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 796907#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 797010#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 795407#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 785973#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 785974#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 784223#L1937-2 [2022-12-13 19:27:42,303 INFO L750 eck$LassoCheckResult]: Loop: 784223#L1937-2 assume !false; 784224#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 785876#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 787846#L1946-2 assume !false; 787061#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 787063#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 784223#L1937-2 [2022-12-13 19:27:42,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:42,303 INFO L85 PathProgramCache]: Analyzing trace with hash 1058059427, now seen corresponding path program 1 times [2022-12-13 19:27:42,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:42,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [15849000] [2022-12-13 19:27:42,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:42,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:42,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:42,344 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:42,345 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:42,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [15849000] [2022-12-13 19:27:42,345 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [15849000] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:42,345 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:42,345 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 19:27:42,345 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1946892720] [2022-12-13 19:27:42,345 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:42,345 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:42,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:42,345 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 9 times [2022-12-13 19:27:42,346 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:42,346 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354672447] [2022-12-13 19:27:42,346 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:42,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:42,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:42,348 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:42,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:42,350 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:42,364 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:42,364 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 19:27:42,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 19:27:42,364 INFO L87 Difference]: Start difference. First operand 17368 states and 32556 transitions. cyclomatic complexity: 15222 Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:42,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:42,811 INFO L93 Difference]: Finished difference Result 24329 states and 45593 transitions. [2022-12-13 19:27:42,811 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24329 states and 45593 transitions. [2022-12-13 19:27:42,886 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 7564 [2022-12-13 19:27:42,939 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24329 states to 24329 states and 45593 transitions. [2022-12-13 19:27:42,940 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24310 [2022-12-13 19:27:42,956 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24310 [2022-12-13 19:27:42,956 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24329 states and 45593 transitions. [2022-12-13 19:27:42,958 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:42,958 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24329 states and 45593 transitions. [2022-12-13 19:27:42,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24329 states and 45593 transitions. [2022-12-13 19:27:43,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24329 to 17368. [2022-12-13 19:27:43,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17368 states, 17368 states have (on average 1.8740211883924458) internal successors, (32548), 17367 states have internal predecessors, (32548), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:43,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17368 states to 17368 states and 32548 transitions. [2022-12-13 19:27:43,155 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17368 states and 32548 transitions. [2022-12-13 19:27:43,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 19:27:43,156 INFO L428 stractBuchiCegarLoop]: Abstraction has 17368 states and 32548 transitions. [2022-12-13 19:27:43,156 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-12-13 19:27:43,156 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17368 states and 32548 transitions. [2022-12-13 19:27:43,199 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2022-12-13 19:27:43,199 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:43,199 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:43,199 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:43,199 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:43,200 INFO L748 eck$LassoCheckResult]: Stem: 831048#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 830700#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 830701#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 839521#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 836371#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 836372#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 837040#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 823362#L2819 assume !(0 == getOrigin_~person#1); 823363#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 827478#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 827479#L2375 assume !(0 == initPersonOnFloor_~floor#1); 824299#L2402 assume !(1 == initPersonOnFloor_~floor#1); 824300#L2429 assume !(2 == initPersonOnFloor_~floor#1); 827210#L2456 assume 3 == initPersonOnFloor_~floor#1; 827211#L2457 assume !(0 == initPersonOnFloor_~person#1); 839108#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 836614#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 834391#L2167 assume !(0 == callOnFloor_~floorID#1); 828243#L2170 assume !(1 == callOnFloor_~floorID#1); 828244#L2173 assume !(2 == callOnFloor_~floorID#1); 837312#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 835319#L2179-2 assume { :end_inline_callOnFloor } true; 836650#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 836651#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 827935#L2819-1 assume !(0 == getOrigin_~person#1); 827936#L2823-1 assume !(1 == getOrigin_~person#1); 832464#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 834472#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 834345#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 830211#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 830212#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 826771#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 826772#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 834339#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 822803#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 838572#L2167-2 assume !(0 == callOnFloor_~floorID#1); 838457#L2170-2 assume !(1 == callOnFloor_~floorID#1); 838458#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 830804#L2179-5 assume { :end_inline_callOnFloor } true; 828897#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 828898#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 833805#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 833806#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 838259#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 836550#L1647 assume 0 != timeShift_~tmp~14#1; 836551#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 838614#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 838716#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 837114#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 827679#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 827680#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 825929#L1937-2 [2022-12-13 19:27:43,200 INFO L750 eck$LassoCheckResult]: Loop: 825929#L1937-2 assume !false; 825930#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 827582#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 829552#L1946-2 assume !false; 828767#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 828769#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 825929#L1937-2 [2022-12-13 19:27:43,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:43,200 INFO L85 PathProgramCache]: Analyzing trace with hash -1946841046, now seen corresponding path program 1 times [2022-12-13 19:27:43,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:43,200 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [999860714] [2022-12-13 19:27:43,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:43,200 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:43,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:43,248 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:43,249 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:43,249 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [999860714] [2022-12-13 19:27:43,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [999860714] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:43,249 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:43,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 19:27:43,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100409559] [2022-12-13 19:27:43,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:43,250 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:43,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:43,250 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 10 times [2022-12-13 19:27:43,250 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:43,250 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [955718205] [2022-12-13 19:27:43,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:43,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:43,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:43,253 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:43,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:43,257 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:43,271 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:43,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 19:27:43,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 19:27:43,272 INFO L87 Difference]: Start difference. First operand 17368 states and 32548 transitions. cyclomatic complexity: 15214 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:43,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:43,987 INFO L93 Difference]: Finished difference Result 32858 states and 61690 transitions. [2022-12-13 19:27:43,987 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 32858 states and 61690 transitions. [2022-12-13 19:27:44,100 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 6896 [2022-12-13 19:27:44,180 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 32858 states to 32858 states and 61690 transitions. [2022-12-13 19:27:44,180 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 32820 [2022-12-13 19:27:44,202 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 32820 [2022-12-13 19:27:44,202 INFO L73 IsDeterministic]: Start isDeterministic. Operand 32858 states and 61690 transitions. [2022-12-13 19:27:44,215 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:44,216 INFO L218 hiAutomatonCegarLoop]: Abstraction has 32858 states and 61690 transitions. [2022-12-13 19:27:44,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32858 states and 61690 transitions. [2022-12-13 19:27:44,513 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32858 to 27846. [2022-12-13 19:27:44,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27846 states, 27846 states have (on average 1.8746678158442864) internal successors, (52202), 27845 states have internal predecessors, (52202), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:44,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27846 states to 27846 states and 52202 transitions. [2022-12-13 19:27:44,585 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27846 states and 52202 transitions. [2022-12-13 19:27:44,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 19:27:44,586 INFO L428 stractBuchiCegarLoop]: Abstraction has 27846 states and 52202 transitions. [2022-12-13 19:27:44,586 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-12-13 19:27:44,586 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27846 states and 52202 transitions. [2022-12-13 19:27:44,660 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 6896 [2022-12-13 19:27:44,660 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:44,660 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:44,661 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:44,661 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:44,662 INFO L748 eck$LassoCheckResult]: Stem: 881332#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 880978#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 880979#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 890328#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 886828#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 886829#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 887529#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 873596#L2819 assume !(0 == getOrigin_~person#1); 873597#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 877726#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 877727#L2375 assume !(0 == initPersonOnFloor_~floor#1); 874537#L2402 assume !(1 == initPersonOnFloor_~floor#1); 874538#L2429 assume !(2 == initPersonOnFloor_~floor#1); 877459#L2456 assume 3 == initPersonOnFloor_~floor#1; 877460#L2457 assume !(0 == initPersonOnFloor_~person#1); 889802#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 887083#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 884768#L2167 assume !(0 == callOnFloor_~floorID#1); 878494#L2170 assume !(1 == callOnFloor_~floorID#1); 878495#L2173 assume !(2 == callOnFloor_~floorID#1); 887819#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 885736#L2179-2 assume { :end_inline_callOnFloor } true; 887121#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 887122#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 878186#L2819-1 assume !(0 == getOrigin_~person#1); 878187#L2823-1 assume !(1 == getOrigin_~person#1); 882771#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 884851#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 884720#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 880481#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 880482#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 877017#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 877018#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 884714#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 873035#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 890574#L2167-2 assume !(0 == callOnFloor_~floorID#1); 890573#L2170-2 assume !(1 == callOnFloor_~floorID#1); 890572#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 881082#L2179-5 assume { :end_inline_callOnFloor } true; 879148#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 879149#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 884156#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 884157#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 888846#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 887012#L1647 assume !(0 != timeShift_~tmp~14#1);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 883175#L1367-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 879656#getCurrentFloorID_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 879657#L703-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 873374#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 878884#stopRequestedAtCurrentFloor_returnLabel#2 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 878044#L1514-2 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 878045#L1605-3 assume !(1 == ~doorState~0); 879936#L1605-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 883225#L1270-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 876423#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 882532#L1243-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 877673#L890-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 877674#L1059-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 874431#stopRequestedInDirection__wrappee__weight_returnLabel#9 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 875114#stopRequestedInDirection_returnLabel#3 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 875115#L1613-2 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 882552#L1305-3 assume !(1 == ~currentHeading~0); 882554#L1315-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 874113#L1315-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 886960#L1321-7 assume { :end_inline_continueInDirection } true; 875003#L1622-5 assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 892297#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 891989#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 891990#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 892003#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 892230#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 892229#L1937-2 [2022-12-13 19:27:44,662 INFO L750 eck$LassoCheckResult]: Loop: 892229#L1937-2 assume !false; 892228#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 892227#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 892225#L1946-2 assume !false; 892222#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 892223#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 892229#L1937-2 [2022-12-13 19:27:44,662 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:44,662 INFO L85 PathProgramCache]: Analyzing trace with hash 1502347685, now seen corresponding path program 1 times [2022-12-13 19:27:44,662 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:44,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [637876176] [2022-12-13 19:27:44,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:44,662 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:44,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:44,748 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:44,748 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:44,749 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [637876176] [2022-12-13 19:27:44,749 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [637876176] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:44,749 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:44,749 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 19:27:44,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [72706878] [2022-12-13 19:27:44,749 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:44,749 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:44,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:44,750 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 11 times [2022-12-13 19:27:44,750 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:44,750 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [837672420] [2022-12-13 19:27:44,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:44,750 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:44,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:44,753 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:44,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:44,756 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:44,771 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:44,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-13 19:27:44,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-12-13 19:27:44,771 INFO L87 Difference]: Start difference. First operand 27846 states and 52202 transitions. cyclomatic complexity: 24424 Second operand has 8 states, 8 states have (on average 8.875) internal successors, (71), 7 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:45,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:45,695 INFO L93 Difference]: Finished difference Result 47140 states and 86966 transitions. [2022-12-13 19:27:45,695 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 47140 states and 86966 transitions. [2022-12-13 19:27:45,846 INFO L131 ngComponentsAnalysis]: Automaton has 332 accepting balls. 17214 [2022-12-13 19:27:45,956 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 47140 states to 47140 states and 86966 transitions. [2022-12-13 19:27:45,956 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47083 [2022-12-13 19:27:45,986 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47083 [2022-12-13 19:27:45,986 INFO L73 IsDeterministic]: Start isDeterministic. Operand 47140 states and 86966 transitions. [2022-12-13 19:27:46,004 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:46,004 INFO L218 hiAutomatonCegarLoop]: Abstraction has 47140 states and 86966 transitions. [2022-12-13 19:27:46,038 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47140 states and 86966 transitions. [2022-12-13 19:27:46,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47140 to 26933. [2022-12-13 19:27:46,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26933 states, 26933 states have (on average 1.8600230200868824) internal successors, (50096), 26932 states have internal predecessors, (50096), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:46,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26933 states to 26933 states and 50096 transitions. [2022-12-13 19:27:46,386 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26933 states and 50096 transitions. [2022-12-13 19:27:46,386 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-13 19:27:46,387 INFO L428 stractBuchiCegarLoop]: Abstraction has 26933 states and 50096 transitions. [2022-12-13 19:27:46,387 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-12-13 19:27:46,387 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26933 states and 50096 transitions. [2022-12-13 19:27:46,458 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8204 [2022-12-13 19:27:46,458 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:46,458 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:46,459 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:46,459 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:46,459 INFO L748 eck$LassoCheckResult]: Stem: 955610#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 955268#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 955269#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 964695#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 960974#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 960975#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 961679#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 948527#L2819 assume !(0 == getOrigin_~person#1); 948528#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 952265#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 952266#L2375 assume !(0 == initPersonOnFloor_~floor#1); 949377#L2402 assume !(1 == initPersonOnFloor_~floor#1); 949378#L2429 assume !(2 == initPersonOnFloor_~floor#1); 952017#L2456 assume 3 == initPersonOnFloor_~floor#1; 952018#L2457 assume !(0 == initPersonOnFloor_~person#1); 964078#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 961221#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 958940#L2167 assume !(0 == callOnFloor_~floorID#1); 952965#L2170 assume !(1 == callOnFloor_~floorID#1); 952966#L2173 assume !(2 == callOnFloor_~floorID#1); 961971#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 959870#L2179-2 assume { :end_inline_callOnFloor } true; 961252#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 961253#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 952678#L2819-1 assume !(0 == getOrigin_~person#1); 952679#L2823-1 assume !(1 == getOrigin_~person#1); 956999#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 959019#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 958895#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 954816#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 954817#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 951606#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 951607#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 958888#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 948020#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 965284#L2167-2 assume !(0 == callOnFloor_~floorID#1); 965283#L2170-2 assume !(1 == callOnFloor_~floorID#1); 965282#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 955371#L2179-5 assume { :end_inline_callOnFloor } true; 953569#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 953570#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 958351#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 958352#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 963059#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 961149#L1647 assume 0 != timeShift_~tmp~14#1; 961150#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 962884#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 953666#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 953667#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 948001#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 948195#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 948196#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 950860#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 957269#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 957270#L1270 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 958244#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 961083#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 950005#L890-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 950006#L1059-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 950222#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 956675#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 961753#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 962095#L1305 assume !(1 == ~currentHeading~0); 949426#L1315 assume !(0 == ~currentFloorID~0); 949427#L1315-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 957820#L1321-1 assume { :end_inline_continueInDirection } true; 952395#L1622-2 assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 965124#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 965110#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 965111#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 965129#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 965248#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 965249#L1937-2 [2022-12-13 19:27:46,459 INFO L750 eck$LassoCheckResult]: Loop: 965249#L1937-2 assume !false; 965246#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 965247#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 965201#L1946-2 assume !false; 965198#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 965199#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 965249#L1937-2 [2022-12-13 19:27:46,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:46,460 INFO L85 PathProgramCache]: Analyzing trace with hash -1647903435, now seen corresponding path program 1 times [2022-12-13 19:27:46,460 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:46,460 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [301538962] [2022-12-13 19:27:46,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:46,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:46,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:46,491 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:46,491 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:46,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [301538962] [2022-12-13 19:27:46,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [301538962] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:46,492 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:46,492 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 19:27:46,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1647094633] [2022-12-13 19:27:46,492 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:46,492 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:46,492 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:46,492 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 12 times [2022-12-13 19:27:46,493 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:46,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120674972] [2022-12-13 19:27:46,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:46,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:46,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:46,495 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:46,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:46,497 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:46,510 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:46,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 19:27:46,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 19:27:46,510 INFO L87 Difference]: Start difference. First operand 26933 states and 50096 transitions. cyclomatic complexity: 23288 Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 2 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:47,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:47,305 INFO L93 Difference]: Finished difference Result 41173 states and 76235 transitions. [2022-12-13 19:27:47,305 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41173 states and 76235 transitions. [2022-12-13 19:27:47,476 INFO L131 ngComponentsAnalysis]: Automaton has 178 accepting balls. 12623 [2022-12-13 19:27:47,585 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41173 states to 41173 states and 76235 transitions. [2022-12-13 19:27:47,585 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 41098 [2022-12-13 19:27:47,610 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 41098 [2022-12-13 19:27:47,611 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41173 states and 76235 transitions. [2022-12-13 19:27:47,630 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:47,630 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41173 states and 76235 transitions. [2022-12-13 19:27:47,664 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41173 states and 76235 transitions. [2022-12-13 19:27:47,948 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41173 to 41172. [2022-12-13 19:27:47,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41172 states, 41172 states have (on average 1.8515981735159817) internal successors, (76234), 41171 states have internal predecessors, (76234), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:48,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41172 states to 41172 states and 76234 transitions. [2022-12-13 19:27:48,043 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41172 states and 76234 transitions. [2022-12-13 19:27:48,044 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 19:27:48,044 INFO L428 stractBuchiCegarLoop]: Abstraction has 41172 states and 76234 transitions. [2022-12-13 19:27:48,044 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-12-13 19:27:48,044 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41172 states and 76234 transitions. [2022-12-13 19:27:48,142 INFO L131 ngComponentsAnalysis]: Automaton has 178 accepting balls. 12623 [2022-12-13 19:27:48,142 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:48,142 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:48,142 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:48,142 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:48,143 INFO L748 eck$LassoCheckResult]: Stem: 1023611#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 1023285#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1023286#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1031753#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1028624#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 1028625#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1029256#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1016635#L2819 assume !(0 == getOrigin_~person#1); 1016636#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1020347#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1020348#L2375 assume !(0 == initPersonOnFloor_~floor#1); 1017480#L2402 assume !(1 == initPersonOnFloor_~floor#1); 1017481#L2429 assume !(2 == initPersonOnFloor_~floor#1); 1020101#L2456 assume 3 == initPersonOnFloor_~floor#1; 1020102#L2457 assume !(0 == initPersonOnFloor_~person#1); 1031296#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1028849#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1026774#L2167 assume !(0 == callOnFloor_~floorID#1); 1021036#L2170 assume !(1 == callOnFloor_~floorID#1); 1021037#L2173 assume !(2 == callOnFloor_~floorID#1); 1029521#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1027636#L2179-2 assume { :end_inline_callOnFloor } true; 1028878#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1028879#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1020752#L2819-1 assume !(0 == getOrigin_~person#1); 1020753#L2823-1 assume !(1 == getOrigin_~person#1); 1024941#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1026848#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1026731#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 1022846#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 1022847#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 1019698#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 1019699#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 1026725#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1016129#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1032153#L2167-2 assume !(0 == callOnFloor_~floorID#1); 1032152#L2170-2 assume !(1 == callOnFloor_~floorID#1); 1032151#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1023384#L2179-5 assume { :end_inline_callOnFloor } true; 1021632#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1021633#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1026227#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 1026228#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1030448#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1028783#L1647 assume 0 != timeShift_~tmp~14#1; 1028784#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 1030301#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1021725#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 1021726#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 1016113#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 1016303#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 1016304#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 1018953#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 1025198#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 1025199#L1270 assume !(0 != ~floorButtons_0~0); 1026132#L1274 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 1027971#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 1028720#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1018106#L890-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1018107#L1059-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 1018321#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 1024634#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 1029323#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 1029635#L1305 assume !(1 == ~currentHeading~0); 1017530#L1315 assume !(0 == ~currentFloorID~0); 1017531#L1315-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1025729#L1321-1 assume { :end_inline_continueInDirection } true; 1020476#L1622-2 assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 1031995#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 1031981#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 1031982#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1032000#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 1032108#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1032107#L1937-2 [2022-12-13 19:27:48,143 INFO L750 eck$LassoCheckResult]: Loop: 1032107#L1937-2 assume !false; 1032106#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1032105#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1032104#L1946-2 assume !false; 1032102#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1032103#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1032107#L1937-2 [2022-12-13 19:27:48,143 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:48,143 INFO L85 PathProgramCache]: Analyzing trace with hash 1142994221, now seen corresponding path program 1 times [2022-12-13 19:27:48,143 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:48,143 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [34689289] [2022-12-13 19:27:48,143 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:48,143 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:48,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:48,173 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:48,174 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:48,174 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [34689289] [2022-12-13 19:27:48,174 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [34689289] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:48,174 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:48,174 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 19:27:48,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1072067652] [2022-12-13 19:27:48,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:48,174 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:48,175 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:48,175 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 13 times [2022-12-13 19:27:48,175 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:48,175 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [919788211] [2022-12-13 19:27:48,175 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:48,175 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:48,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:48,178 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:48,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:48,180 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:48,194 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:48,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 19:27:48,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 19:27:48,195 INFO L87 Difference]: Start difference. First operand 41172 states and 76234 transitions. cyclomatic complexity: 35244 Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 2 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:49,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:49,044 INFO L93 Difference]: Finished difference Result 69461 states and 128203 transitions. [2022-12-13 19:27:49,044 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69461 states and 128203 transitions. [2022-12-13 19:27:49,279 INFO L131 ngComponentsAnalysis]: Automaton has 290 accepting balls. 21425 [2022-12-13 19:27:49,448 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69461 states to 69461 states and 128203 transitions. [2022-12-13 19:27:49,448 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69352 [2022-12-13 19:27:49,491 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69352 [2022-12-13 19:27:49,492 INFO L73 IsDeterministic]: Start isDeterministic. Operand 69461 states and 128203 transitions. [2022-12-13 19:27:49,492 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:49,492 INFO L218 hiAutomatonCegarLoop]: Abstraction has 69461 states and 128203 transitions. [2022-12-13 19:27:49,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69461 states and 128203 transitions. [2022-12-13 19:27:50,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69461 to 69459. [2022-12-13 19:27:50,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69459 states, 69459 states have (on average 1.845707539699679) internal successors, (128201), 69458 states have internal predecessors, (128201), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:50,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69459 states to 69459 states and 128201 transitions. [2022-12-13 19:27:50,249 INFO L240 hiAutomatonCegarLoop]: Abstraction has 69459 states and 128201 transitions. [2022-12-13 19:27:50,250 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 19:27:50,250 INFO L428 stractBuchiCegarLoop]: Abstraction has 69459 states and 128201 transitions. [2022-12-13 19:27:50,250 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-12-13 19:27:50,250 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 69459 states and 128201 transitions. [2022-12-13 19:27:50,430 INFO L131 ngComponentsAnalysis]: Automaton has 290 accepting balls. 21425 [2022-12-13 19:27:50,430 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:50,430 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:50,431 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:50,431 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:50,431 INFO L748 eck$LassoCheckResult]: Stem: 1134256#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 1133932#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1133933#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1142377#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1139252#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 1139253#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1139877#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1127273#L2819 assume !(0 == getOrigin_~person#1); 1127274#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1130978#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1130979#L2375 assume !(0 == initPersonOnFloor_~floor#1); 1128116#L2402 assume !(1 == initPersonOnFloor_~floor#1); 1128117#L2429 assume !(2 == initPersonOnFloor_~floor#1); 1130730#L2456 assume 3 == initPersonOnFloor_~floor#1; 1130731#L2457 assume !(0 == initPersonOnFloor_~person#1); 1141912#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1139474#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1137395#L2167 assume !(0 == callOnFloor_~floorID#1); 1131672#L2170 assume !(1 == callOnFloor_~floorID#1); 1131673#L2173 assume !(2 == callOnFloor_~floorID#1); 1140152#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1138254#L2179-2 assume { :end_inline_callOnFloor } true; 1139505#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1139506#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1131387#L2819-1 assume !(0 == getOrigin_~person#1); 1131388#L2823-1 assume !(1 == getOrigin_~person#1); 1135581#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1137470#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1137353#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 1133483#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 1133484#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 1130332#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 1130333#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 1137345#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1126767#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1142787#L2167-2 assume !(0 == callOnFloor_~floorID#1); 1142786#L2170-2 assume !(1 == callOnFloor_~floorID#1); 1142785#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1134029#L2179-5 assume { :end_inline_callOnFloor } true; 1132269#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1132270#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1136847#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 1136848#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1141082#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1139410#L1647 assume 0 != timeShift_~tmp~14#1; 1139411#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 1140934#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1132364#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 1132365#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 1126748#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 1126939#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 1126940#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 1129588#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 1135836#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 1135837#L1270 assume !(0 != ~floorButtons_0~0); 1136754#L1274 assume !(0 != ~floorButtons_1~0); 1140675#L1278 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 1138587#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 1139347#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1128742#L890-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1128743#L1059-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 1128956#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 1135273#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 1139946#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 1140269#L1305 assume !(1 == ~currentHeading~0); 1128167#L1315 assume !(0 == ~currentFloorID~0); 1128168#L1315-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1136358#L1321-1 assume { :end_inline_continueInDirection } true; 1131108#L1622-2 assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 1142632#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 1142618#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 1142619#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1142637#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 1142755#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1142756#L1937-2 [2022-12-13 19:27:50,432 INFO L750 eck$LassoCheckResult]: Loop: 1142756#L1937-2 assume !false; 1142753#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1142754#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1142770#L1946-2 assume !false; 1142767#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1142766#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1142756#L1937-2 [2022-12-13 19:27:50,432 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:50,432 INFO L85 PathProgramCache]: Analyzing trace with hash 1071081168, now seen corresponding path program 1 times [2022-12-13 19:27:50,432 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:50,432 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [662463779] [2022-12-13 19:27:50,432 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:50,432 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:50,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:50,463 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:50,464 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:50,464 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [662463779] [2022-12-13 19:27:50,464 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [662463779] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:50,464 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:50,464 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 19:27:50,464 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [204791708] [2022-12-13 19:27:50,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:50,464 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:50,465 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:50,465 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 14 times [2022-12-13 19:27:50,465 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:50,465 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [567373594] [2022-12-13 19:27:50,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:50,465 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:50,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:50,468 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:50,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:50,471 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:50,485 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:50,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 19:27:50,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 19:27:50,486 INFO L87 Difference]: Start difference. First operand 69459 states and 128201 transitions. cyclomatic complexity: 59038 Second operand has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 2 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:51,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:51,809 INFO L93 Difference]: Finished difference Result 125625 states and 231255 transitions. [2022-12-13 19:27:51,809 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 125625 states and 231255 transitions. [2022-12-13 19:27:52,405 INFO L131 ngComponentsAnalysis]: Automaton has 514 accepting balls. 38937 [2022-12-13 19:27:52,784 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 125625 states to 125625 states and 231255 transitions. [2022-12-13 19:27:52,784 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 125450 [2022-12-13 19:27:52,865 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 125450 [2022-12-13 19:27:52,865 INFO L73 IsDeterministic]: Start isDeterministic. Operand 125625 states and 231255 transitions. [2022-12-13 19:27:52,872 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:52,873 INFO L218 hiAutomatonCegarLoop]: Abstraction has 125625 states and 231255 transitions. [2022-12-13 19:27:52,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125625 states and 231255 transitions. [2022-12-13 19:27:53,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125625 to 125621. [2022-12-13 19:27:54,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125621 states, 125621 states have (on average 1.8408625946298787) internal successors, (231251), 125620 states have internal predecessors, (231251), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:54,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125621 states to 125621 states and 231251 transitions. [2022-12-13 19:27:54,302 INFO L240 hiAutomatonCegarLoop]: Abstraction has 125621 states and 231251 transitions. [2022-12-13 19:27:54,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 19:27:54,303 INFO L428 stractBuchiCegarLoop]: Abstraction has 125621 states and 231251 transitions. [2022-12-13 19:27:54,303 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-12-13 19:27:54,303 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 125621 states and 231251 transitions. [2022-12-13 19:27:54,735 INFO L131 ngComponentsAnalysis]: Automaton has 514 accepting balls. 38937 [2022-12-13 19:27:54,736 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:27:54,736 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:27:54,736 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:27:54,736 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:27:54,736 INFO L748 eck$LassoCheckResult]: Stem: 1329381#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 1329051#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1329052#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1337704#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1334423#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 1334424#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1335067#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1322360#L2819 assume !(0 == getOrigin_~person#1); 1322361#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1326082#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1326083#L2375 assume !(0 == initPersonOnFloor_~floor#1); 1323202#L2402 assume !(1 == initPersonOnFloor_~floor#1); 1323203#L2429 assume !(2 == initPersonOnFloor_~floor#1); 1325831#L2456 assume 3 == initPersonOnFloor_~floor#1; 1325832#L2457 assume !(0 == initPersonOnFloor_~person#1); 1337196#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1334649#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1332550#L2167 assume !(0 == callOnFloor_~floorID#1); 1326778#L2170 assume !(1 == callOnFloor_~floorID#1); 1326779#L2173 assume !(2 == callOnFloor_~floorID#1); 1335343#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1333414#L2179-2 assume { :end_inline_callOnFloor } true; 1334681#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1334682#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1326492#L2819-1 assume !(0 == getOrigin_~person#1); 1326493#L2823-1 assume !(1 == getOrigin_~person#1); 1330713#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1332625#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1332508#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 1328599#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 1328600#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 1325432#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 1325433#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 1332502#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1321857#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1338161#L2167-2 assume !(0 == callOnFloor_~floorID#1); 1338160#L2170-2 assume !(1 == callOnFloor_~floorID#1); 1338159#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1329151#L2179-5 assume { :end_inline_callOnFloor } true; 1327377#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1327378#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1332002#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 1332003#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1336312#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1334587#L1647 assume 0 != timeShift_~tmp~14#1; 1334588#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 1336156#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1327471#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 1327472#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 1321838#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 1322028#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 1322029#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 1324682#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 1330971#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 1330972#L1270 assume !(0 != ~floorButtons_0~0); 1331910#L1274 assume !(0 != ~floorButtons_1~0); 1335889#L1278 assume !(0 != ~floorButtons_2~0); 1335890#L1282 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 1333760#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 1334519#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1323831#L890-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1323832#L1059-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 1324594#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 1330407#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 1335137#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 1335459#L1305 assume !(1 == ~currentHeading~0); 1323251#L1315 assume !(0 == ~currentFloorID~0); 1323252#L1315-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1331505#L1321-1 assume { :end_inline_continueInDirection } true; 1326215#L1622-2 assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 1338001#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 1337987#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 1337988#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1338006#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 1338087#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1338088#L1937-2 [2022-12-13 19:27:54,736 INFO L750 eck$LassoCheckResult]: Loop: 1338088#L1937-2 assume !false; 1338085#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1338086#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1338136#L1946-2 assume !false; 1338132#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1338109#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1338088#L1937-2 [2022-12-13 19:27:54,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:54,737 INFO L85 PathProgramCache]: Analyzing trace with hash -1848617944, now seen corresponding path program 1 times [2022-12-13 19:27:54,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:54,737 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [876319224] [2022-12-13 19:27:54,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:54,737 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:54,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:27:54,765 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:27:54,765 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:27:54,765 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [876319224] [2022-12-13 19:27:54,766 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [876319224] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:27:54,766 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:27:54,766 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 19:27:54,766 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1104287293] [2022-12-13 19:27:54,766 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:27:54,766 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:27:54,766 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:27:54,766 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 15 times [2022-12-13 19:27:54,766 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:27:54,767 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1822546490] [2022-12-13 19:27:54,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:27:54,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:27:54,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:54,769 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:27:54,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:27:54,773 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:27:54,788 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:27:54,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 19:27:54,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 19:27:54,788 INFO L87 Difference]: Start difference. First operand 125621 states and 231251 transitions. cyclomatic complexity: 106154 Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 2 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:27:56,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:27:56,390 INFO L93 Difference]: Finished difference Result 237099 states and 435325 transitions. [2022-12-13 19:27:56,390 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 237099 states and 435325 transitions. [2022-12-13 19:27:57,605 INFO L131 ngComponentsAnalysis]: Automaton has 962 accepting balls. 73757 [2022-12-13 19:27:58,371 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 237099 states to 237099 states and 435325 transitions. [2022-12-13 19:27:58,372 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 236796 [2022-12-13 19:27:58,527 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 236796 [2022-12-13 19:27:58,527 INFO L73 IsDeterministic]: Start isDeterministic. Operand 237099 states and 435325 transitions. [2022-12-13 19:27:58,693 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:27:58,693 INFO L218 hiAutomatonCegarLoop]: Abstraction has 237099 states and 435325 transitions. [2022-12-13 19:27:58,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237099 states and 435325 transitions. [2022-12-13 19:28:00,514 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237099 to 237091. [2022-12-13 19:28:00,644 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 237091 states, 237091 states have (on average 1.836075599664264) internal successors, (435317), 237090 states have internal predecessors, (435317), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:28:01,242 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 237091 states to 237091 states and 435317 transitions. [2022-12-13 19:28:01,242 INFO L240 hiAutomatonCegarLoop]: Abstraction has 237091 states and 435317 transitions. [2022-12-13 19:28:01,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 19:28:01,243 INFO L428 stractBuchiCegarLoop]: Abstraction has 237091 states and 435317 transitions. [2022-12-13 19:28:01,244 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-12-13 19:28:01,244 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 237091 states and 435317 transitions. [2022-12-13 19:28:01,911 INFO L131 ngComponentsAnalysis]: Automaton has 962 accepting balls. 73757 [2022-12-13 19:28:01,911 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:28:01,911 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:28:01,912 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:28:01,912 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:28:01,912 INFO L748 eck$LassoCheckResult]: Stem: 1692130#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 1691793#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 1691794#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1700709#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1697275#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 1697276#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 1697949#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1685082#L2819 assume !(0 == getOrigin_~person#1); 1685083#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1688815#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1688816#L2375 assume !(0 == initPersonOnFloor_~floor#1); 1685923#L2402 assume !(1 == initPersonOnFloor_~floor#1); 1685924#L2429 assume !(2 == initPersonOnFloor_~floor#1); 1688566#L2456 assume 3 == initPersonOnFloor_~floor#1; 1688567#L2457 assume !(0 == initPersonOnFloor_~person#1); 1700176#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1697514#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1695360#L2167 assume !(0 == callOnFloor_~floorID#1); 1689506#L2170 assume !(1 == callOnFloor_~floorID#1); 1689507#L2173 assume !(2 == callOnFloor_~floorID#1); 1698236#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1696253#L2179-2 assume { :end_inline_callOnFloor } true; 1697545#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1697546#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1689223#L2819-1 assume !(0 == getOrigin_~person#1); 1689224#L2823-1 assume !(1 == getOrigin_~person#1); 1693477#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1695433#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1695315#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 1691347#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 1691348#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 1688157#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 1688158#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 1695308#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1684582#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1701206#L2167-2 assume !(0 == callOnFloor_~floorID#1); 1701205#L2170-2 assume !(1 == callOnFloor_~floorID#1); 1701204#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1691894#L2179-5 assume { :end_inline_callOnFloor } true; 1690110#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1690111#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 1694792#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 1694793#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 1699233#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1697444#L1647 assume 0 != timeShift_~tmp~14#1; 1697445#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 1699077#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 1690205#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 1690206#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 1684566#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 1684751#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 1684752#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 1687401#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 1693749#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 1693750#L1270 assume !(0 != ~floorButtons_0~0); 1694694#L1274 assume !(0 != ~floorButtons_1~0); 1698793#L1278 assume !(0 != ~floorButtons_2~0); 1698794#L1282 assume !(0 != ~floorButtons_3~0); 1696593#L1286 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~13#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 1696594#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 1697376#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1686550#L890-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1686551#L1059-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 1687311#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 1693165#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 1698026#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 1698366#L1305 assume !(1 == ~currentHeading~0); 1685972#L1315 assume !(0 == ~currentFloorID~0); 1685973#L1315-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1694286#L1321-1 assume { :end_inline_continueInDirection } true; 1688946#L1622-2 assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 1701057#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 1701043#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 1701044#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1701062#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 1701114#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1701115#L1937-2 [2022-12-13 19:28:01,912 INFO L750 eck$LassoCheckResult]: Loop: 1701115#L1937-2 assume !false; 1701112#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1701113#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1701182#L1946-2 assume !false; 1701174#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1701164#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1701115#L1937-2 [2022-12-13 19:28:01,912 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:28:01,912 INFO L85 PathProgramCache]: Analyzing trace with hash -554549079, now seen corresponding path program 1 times [2022-12-13 19:28:01,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:28:01,913 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1702784420] [2022-12-13 19:28:01,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:28:01,913 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:28:01,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:28:01,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:28:01,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:28:01,972 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1702784420] [2022-12-13 19:28:01,973 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1702784420] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:28:01,973 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:28:01,973 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 19:28:01,973 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [699552392] [2022-12-13 19:28:01,973 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:28:01,973 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:28:01,973 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:28:01,973 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 16 times [2022-12-13 19:28:01,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:28:01,974 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [727472194] [2022-12-13 19:28:01,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:28:01,974 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:28:01,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:28:01,977 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:28:01,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:28:01,980 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:28:01,994 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:28:01,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 19:28:01,994 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 19:28:01,994 INFO L87 Difference]: Start difference. First operand 237091 states and 435317 transitions. cyclomatic complexity: 199206 Second operand has 5 states, 5 states have (on average 15.2) internal successors, (76), 4 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:28:07,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:28:07,074 INFO L93 Difference]: Finished difference Result 928142 states and 1691735 transitions. [2022-12-13 19:28:07,074 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 928142 states and 1691735 transitions. [2022-12-13 19:28:11,134 INFO L131 ngComponentsAnalysis]: Automaton has 5082 accepting balls. 322157 [2022-12-13 19:28:14,097 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 928142 states to 928142 states and 1691735 transitions. [2022-12-13 19:28:14,097 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 927752 [2022-12-13 19:28:14,872 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 927752 [2022-12-13 19:28:14,873 INFO L73 IsDeterministic]: Start isDeterministic. Operand 928142 states and 1691735 transitions. [2022-12-13 19:28:14,882 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:28:14,882 INFO L218 hiAutomatonCegarLoop]: Abstraction has 928142 states and 1691735 transitions. [2022-12-13 19:28:15,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 928142 states and 1691735 transitions. [2022-12-13 19:28:20,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 928142 to 420546. [2022-12-13 19:28:20,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 420546 states, 420546 states have (on average 1.8314738459050852) internal successors, (770219), 420545 states have internal predecessors, (770219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:28:21,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 420546 states to 420546 states and 770219 transitions. [2022-12-13 19:28:21,334 INFO L240 hiAutomatonCegarLoop]: Abstraction has 420546 states and 770219 transitions. [2022-12-13 19:28:21,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-13 19:28:21,335 INFO L428 stractBuchiCegarLoop]: Abstraction has 420546 states and 770219 transitions. [2022-12-13 19:28:21,335 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-12-13 19:28:21,335 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 420546 states and 770219 transitions. [2022-12-13 19:28:22,365 INFO L131 ngComponentsAnalysis]: Automaton has 1786 accepting balls. 139047 [2022-12-13 19:28:22,365 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:28:22,365 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:28:22,366 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:28:22,366 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:28:22,366 INFO L748 eck$LassoCheckResult]: Stem: 2857459#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 2857113#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 2857114#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2867001#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 2862962#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 2862963#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 2863703#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 2850320#L2819 assume !(0 == getOrigin_~person#1); 2850321#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 2854062#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2854063#L2375 assume !(0 == initPersonOnFloor_~floor#1); 2851155#L2402 assume !(1 == initPersonOnFloor_~floor#1); 2851156#L2429 assume !(2 == initPersonOnFloor_~floor#1); 2853815#L2456 assume 3 == initPersonOnFloor_~floor#1; 2853816#L2457 assume !(0 == initPersonOnFloor_~person#1); 2866304#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 2863215#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2860859#L2167 assume !(0 == callOnFloor_~floorID#1); 2854767#L2170 assume !(1 == callOnFloor_~floorID#1); 2854768#L2173 assume !(2 == callOnFloor_~floorID#1); 2864011#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 2861820#L2179-2 assume { :end_inline_callOnFloor } true; 2863249#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2863250#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 2854476#L2819-1 assume !(0 == getOrigin_~person#1); 2854477#L2823-1 assume !(1 == getOrigin_~person#1); 2858848#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 2860944#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2860810#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 2856656#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 2856657#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 2853409#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 2853410#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 2860801#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 2849824#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2867546#L2167-2 assume !(0 == callOnFloor_~floorID#1); 2867545#L2170-2 assume !(1 == callOnFloor_~floorID#1); 2867544#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 2857215#L2179-5 assume { :end_inline_callOnFloor } true; 2855377#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 2855378#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 2860246#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 2860247#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 2865165#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 2863137#L1647 assume 0 != timeShift_~tmp~14#1; 2863138#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 2864985#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 2855472#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 2855473#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 2849808#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 2849989#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 2849990#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 2852645#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 2859133#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 2859134#L1270 assume !(0 != ~floorButtons_0~0); 2860146#L1274 assume !(0 != ~floorButtons_1~0); 2864656#L1278 assume !(0 != ~floorButtons_2~0); 2864657#L1282 assume !(0 != ~floorButtons_3~0); 2862203#L1286 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~13#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 2862204#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 2863066#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 2851787#L890-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 2851788#isTopFloor_returnLabel#3 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~7#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 2856385#L894-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~7#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 2852555#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 2858518#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 2863782#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 2864155#L1305 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 2862177#isTopFloor_returnLabel#4 continueInDirection_#t~ret50#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~9#1 := continueInDirection_#t~ret50#1;havoc continueInDirection_#t~ret50#1; 2862178#L1309 assume 0 != continueInDirection_~tmp~9#1;~currentHeading~0 := 0; 2867002#L1315-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2859707#L1321-1 assume { :end_inline_continueInDirection } true; 2854193#L1622-2 assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 2868851#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 2868837#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 2868838#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2868856#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 2868905#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 2868906#L1937-2 [2022-12-13 19:28:22,366 INFO L750 eck$LassoCheckResult]: Loop: 2868906#L1937-2 assume !false; 2868903#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 2868904#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 2868984#L1946-2 assume !false; 2868975#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 2868964#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 2868906#L1937-2 [2022-12-13 19:28:22,366 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:28:22,366 INFO L85 PathProgramCache]: Analyzing trace with hash 614347893, now seen corresponding path program 1 times [2022-12-13 19:28:22,367 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:28:22,367 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1173699471] [2022-12-13 19:28:22,367 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:28:22,367 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:28:22,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:28:22,418 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:28:22,418 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:28:22,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1173699471] [2022-12-13 19:28:22,418 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1173699471] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:28:22,418 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:28:22,418 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 19:28:22,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [423935057] [2022-12-13 19:28:22,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:28:22,419 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:28:22,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:28:22,419 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 17 times [2022-12-13 19:28:22,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:28:22,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1505932143] [2022-12-13 19:28:22,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:28:22,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:28:22,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:28:22,421 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:28:22,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:28:22,423 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:28:22,436 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:28:22,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 19:28:22,437 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 19:28:22,437 INFO L87 Difference]: Start difference. First operand 420546 states and 770219 transitions. cyclomatic complexity: 351478 Second operand has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:28:26,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:28:26,678 INFO L93 Difference]: Finished difference Result 702552 states and 1274847 transitions. [2022-12-13 19:28:26,678 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 702552 states and 1274847 transitions. [2022-12-13 19:28:29,677 INFO L131 ngComponentsAnalysis]: Automaton has 4266 accepting balls. 248753 [2022-12-13 19:28:31,516 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 702552 states to 702552 states and 1274847 transitions. [2022-12-13 19:28:31,516 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 702162 [2022-12-13 19:28:32,057 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 702162 [2022-12-13 19:28:32,057 INFO L73 IsDeterministic]: Start isDeterministic. Operand 702552 states and 1274847 transitions. [2022-12-13 19:28:32,058 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:28:32,058 INFO L218 hiAutomatonCegarLoop]: Abstraction has 702552 states and 1274847 transitions. [2022-12-13 19:28:32,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 702552 states and 1274847 transitions. [2022-12-13 19:28:36,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 702552 to 421671. [2022-12-13 19:28:36,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 421671 states, 421671 states have (on average 1.8292555096271739) internal successors, (771344), 421670 states have internal predecessors, (771344), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:28:37,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421671 states to 421671 states and 771344 transitions. [2022-12-13 19:28:37,488 INFO L240 hiAutomatonCegarLoop]: Abstraction has 421671 states and 771344 transitions. [2022-12-13 19:28:37,489 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 19:28:37,489 INFO L428 stractBuchiCegarLoop]: Abstraction has 421671 states and 771344 transitions. [2022-12-13 19:28:37,489 INFO L335 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-12-13 19:28:37,489 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 421671 states and 771344 transitions. [2022-12-13 19:28:38,653 INFO L131 ngComponentsAnalysis]: Automaton has 1786 accepting balls. 139387 [2022-12-13 19:28:38,653 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:28:38,653 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:28:38,654 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:28:38,654 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:28:38,655 INFO L748 eck$LassoCheckResult]: Stem: 3980615#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 3980268#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 3980269#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3990249#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 3986117#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 3986118#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 3986875#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 3973435#L2819 assume !(0 == getOrigin_~person#1); 3973436#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 3977200#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3977201#L2375 assume !(0 == initPersonOnFloor_~floor#1); 3974274#L2402 assume !(1 == initPersonOnFloor_~floor#1); 3974275#L2429 assume !(2 == initPersonOnFloor_~floor#1); 3976947#L2456 assume 3 == initPersonOnFloor_~floor#1; 3976948#L2457 assume !(0 == initPersonOnFloor_~person#1); 3989517#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 3986377#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3984024#L2167 assume !(0 == callOnFloor_~floorID#1); 3977903#L2170 assume !(1 == callOnFloor_~floorID#1); 3977904#L2173 assume !(2 == callOnFloor_~floorID#1); 3987197#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 3984995#L2179-2 assume { :end_inline_callOnFloor } true; 3986410#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 3986411#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 3977612#L2819-1 assume !(0 == getOrigin_~person#1); 3977613#L2823-1 assume !(1 == getOrigin_~person#1); 3982027#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 3984109#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3983971#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 3979796#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 3979797#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 3976541#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 3976542#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 3983964#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 3972937#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3990965#L2167-2 assume !(0 == callOnFloor_~floorID#1); 3988601#L2170-2 assume !(1 == callOnFloor_~floorID#1); 3988602#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 3980373#L2179-5 assume { :end_inline_callOnFloor } true; 3978509#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 3978510#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 3983404#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 3983405#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 3988354#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 3986300#L1647 assume 0 != timeShift_~tmp~14#1; 3986301#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 3988167#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 3978607#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 3978608#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 3972918#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 3973104#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 3973105#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 3975777#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 3982305#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 3982306#L1270 assume !(0 != ~floorButtons_0~0); 3983305#L1274 assume !(0 != ~floorButtons_1~0); 3987828#L1278 assume !(0 != ~floorButtons_2~0); 3987829#L1282 assume !(0 != ~floorButtons_3~0); 3985370#L1286 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~13#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 3985371#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 3986222#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 3974904#L890-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 3974905#isTopFloor_returnLabel#3 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~7#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 3979527#L894-2 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~7#1); 3979529#L900-2 assume ~currentFloorID~0 < 0; 3988278#L901-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 3990670#L2104-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 3973935#isFloorCalling_returnLabel#22 stopRequestedInDirection__wrappee__weight_#t~ret36#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___4~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret36#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret36#1; 3982235#L905-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 3975687#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 3981699#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 3990757#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 3987336#L1305 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 3985342#isTopFloor_returnLabel#4 continueInDirection_#t~ret50#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~9#1 := continueInDirection_#t~ret50#1;havoc continueInDirection_#t~ret50#1; 3985343#L1309 assume 0 != continueInDirection_~tmp~9#1;~currentHeading~0 := 0; 3990250#L1315-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3982872#L1321-1 assume { :end_inline_continueInDirection } true; 3977333#L1622-2 assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 3992099#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 3992085#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 3992086#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 3992124#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 3992153#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 3992154#L1937-2 [2022-12-13 19:28:38,655 INFO L750 eck$LassoCheckResult]: Loop: 3992154#L1937-2 assume !false; 3992151#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 3992152#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 3992223#L1946-2 assume !false; 3992216#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 3992208#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 3992154#L1937-2 [2022-12-13 19:28:38,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:28:38,655 INFO L85 PathProgramCache]: Analyzing trace with hash 1784361149, now seen corresponding path program 1 times [2022-12-13 19:28:38,655 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:28:38,655 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2106125298] [2022-12-13 19:28:38,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:28:38,655 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:28:38,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:28:38,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:28:38,697 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:28:38,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2106125298] [2022-12-13 19:28:38,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2106125298] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:28:38,698 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:28:38,698 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 19:28:38,698 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1317220810] [2022-12-13 19:28:38,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:28:38,698 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:28:38,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:28:38,698 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 18 times [2022-12-13 19:28:38,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:28:38,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [737719086] [2022-12-13 19:28:38,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:28:38,699 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:28:38,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:28:38,701 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:28:38,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:28:38,703 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:28:38,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:28:38,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 19:28:38,718 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 19:28:38,718 INFO L87 Difference]: Start difference. First operand 421671 states and 771344 transitions. cyclomatic complexity: 351478 Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 2 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:28:43,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 19:28:43,004 INFO L93 Difference]: Finished difference Result 518131 states and 938282 transitions. [2022-12-13 19:28:43,004 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 518131 states and 938282 transitions. [2022-12-13 19:28:45,046 INFO L131 ngComponentsAnalysis]: Automaton has 2196 accepting balls. 168451 [2022-12-13 19:28:46,639 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 518131 states to 518131 states and 938282 transitions. [2022-12-13 19:28:46,639 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 517817 [2022-12-13 19:28:46,944 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 517817 [2022-12-13 19:28:46,944 INFO L73 IsDeterministic]: Start isDeterministic. Operand 518131 states and 938282 transitions. [2022-12-13 19:28:46,945 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 19:28:46,945 INFO L218 hiAutomatonCegarLoop]: Abstraction has 518131 states and 938282 transitions. [2022-12-13 19:28:47,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 518131 states and 938282 transitions. [2022-12-13 19:28:50,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 518131 to 516883. [2022-12-13 19:28:51,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 516883 states, 516883 states have (on average 1.811849103181958) internal successors, (936514), 516882 states have internal predecessors, (936514), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 19:28:52,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 516883 states to 516883 states and 936514 transitions. [2022-12-13 19:28:52,414 INFO L240 hiAutomatonCegarLoop]: Abstraction has 516883 states and 936514 transitions. [2022-12-13 19:28:52,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 19:28:52,415 INFO L428 stractBuchiCegarLoop]: Abstraction has 516883 states and 936514 transitions. [2022-12-13 19:28:52,415 INFO L335 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-12-13 19:28:52,415 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 516883 states and 936514 transitions. [2022-12-13 19:28:53,873 INFO L131 ngComponentsAnalysis]: Automaton has 2196 accepting balls. 168111 [2022-12-13 19:28:53,874 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 19:28:53,874 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 19:28:53,875 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 19:28:53,875 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 19:28:53,875 INFO L748 eck$LassoCheckResult]: Stem: 4920202#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 4919859#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 4919860#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4929079#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 4925414#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 4925415#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 4926120#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 4913216#L2819 assume !(0 == getOrigin_~person#1); 4913217#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 4916898#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4916899#L2375 assume !(0 == initPersonOnFloor_~floor#1); 4914031#L2402 assume !(1 == initPersonOnFloor_~floor#1); 4914032#L2429 assume !(2 == initPersonOnFloor_~floor#1); 4916646#L2456 assume 3 == initPersonOnFloor_~floor#1; 4916647#L2457 assume !(0 == initPersonOnFloor_~person#1); 4928460#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 4925656#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4923449#L2167 assume !(0 == callOnFloor_~floorID#1); 4917577#L2170 assume !(1 == callOnFloor_~floorID#1); 4917578#L2173 assume !(2 == callOnFloor_~floorID#1); 4926417#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 4924344#L2179-2 assume { :end_inline_callOnFloor } true; 4925693#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 4925694#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 4917305#L2819-1 assume !(0 == getOrigin_~person#1); 4917306#L2823-1 assume !(1 == getOrigin_~person#1); 4921549#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 4923529#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4923404#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 4919401#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 4919402#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 4916258#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 4916259#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 4923396#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 4912734#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4929875#L2167-2 assume !(0 == callOnFloor_~floorID#1); 4929873#L2170-2 assume !(1 == callOnFloor_~floorID#1); 4929871#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 4919965#L2179-5 assume { :end_inline_callOnFloor } true; 4918178#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 4918179#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 4922871#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 4922872#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 4927466#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 4925579#L1647 assume 0 != timeShift_~tmp~14#1; 4925580#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 4927296#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 4918275#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 4918276#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 4912715#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 4912898#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 4912899#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 4915504#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 4921825#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 4921826#L1270 assume !(0 != ~floorButtons_0~0); 4922775#L1274 assume !(0 != ~floorButtons_1~0); 4927012#L1278 assume !(0 != ~floorButtons_2~0); 4927013#L1282 assume !(0 != ~floorButtons_3~0); 4924703#L1286 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~13#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 4924704#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 4925516#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 4914656#L890-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 4914657#isTopFloor_returnLabel#3 stopRequestedInDirection__wrappee__weight_#t~ret35#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~7#1 := stopRequestedInDirection__wrappee__weight_#t~ret35#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1; 4919151#L894-2 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~7#1); 4919153#L900-2 assume !(~currentFloorID~0 < 0); 4927396#$Ultimate##2649 assume !(~currentFloorID~0 < 0); 4927945#$Ultimate##2655 assume ~currentFloorID~0 < 1; 4928667#L930-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 4914298#L2104-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 4914299#isFloorCalling_returnLabel#23 stopRequestedInDirection__wrappee__weight_#t~ret37#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___3~1#1 := stopRequestedInDirection__wrappee__weight_#t~ret37#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret37#1; 4928680#L934-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 4915415#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 4929879#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 4929439#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 4926547#L1305 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 4924676#isTopFloor_returnLabel#4 continueInDirection_#t~ret50#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~9#1 := continueInDirection_#t~ret50#1;havoc continueInDirection_#t~ret50#1; 4924677#L1309 assume 0 != continueInDirection_~tmp~9#1;~currentHeading~0 := 0; 4929080#L1315-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4922358#L1321-1 assume { :end_inline_continueInDirection } true; 4917030#L1622-2 assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 4930869#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 4930855#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 4930856#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 4930874#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 4930931#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 4930932#L1937-2 [2022-12-13 19:28:53,875 INFO L750 eck$LassoCheckResult]: Loop: 4930932#L1937-2 assume !false; 4930929#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 4930930#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 4930964#L1946-2 assume !false; 4930960#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 4930958#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 4930932#L1937-2 [2022-12-13 19:28:53,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:28:53,875 INFO L85 PathProgramCache]: Analyzing trace with hash -380225528, now seen corresponding path program 1 times [2022-12-13 19:28:53,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:28:53,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [106981591] [2022-12-13 19:28:53,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:28:53,876 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:28:53,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 19:28:53,931 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 19:28:53,931 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 19:28:53,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [106981591] [2022-12-13 19:28:53,931 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [106981591] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 19:28:53,931 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 19:28:53,931 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 19:28:53,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [3917322] [2022-12-13 19:28:53,932 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 19:28:53,932 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 19:28:53,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 19:28:53,932 INFO L85 PathProgramCache]: Analyzing trace with hash 763776811, now seen corresponding path program 19 times [2022-12-13 19:28:53,932 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 19:28:53,932 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2049447500] [2022-12-13 19:28:53,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 19:28:53,932 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 19:28:53,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:28:53,935 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 19:28:53,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 19:28:53,938 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 19:28:53,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 19:28:53,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 19:28:53,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 19:28:53,952 INFO L87 Difference]: Start difference. First operand 516883 states and 936514 transitions. cyclomatic complexity: 421846 Second operand has 5 states, 5 states have (on average 17.0) internal successors, (85), 5 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)