./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ef17cfb4a2c8358ea255253edc0610051a64c94a86cd92ff89d3b074c51925f6 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 11:23:15,736 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 11:23:15,738 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 11:23:15,755 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 11:23:15,755 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 11:23:15,756 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 11:23:15,757 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 11:23:15,758 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 11:23:15,759 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 11:23:15,760 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 11:23:15,760 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 11:23:15,761 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 11:23:15,761 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 11:23:15,762 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 11:23:15,762 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 11:23:15,763 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 11:23:15,764 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 11:23:15,764 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 11:23:15,765 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 11:23:15,766 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 11:23:15,767 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 11:23:15,769 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 11:23:15,770 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 11:23:15,771 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 11:23:15,774 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 11:23:15,774 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 11:23:15,775 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 11:23:15,775 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 11:23:15,776 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 11:23:15,777 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 11:23:15,777 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 11:23:15,778 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 11:23:15,778 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 11:23:15,779 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 11:23:15,780 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 11:23:15,780 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 11:23:15,780 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 11:23:15,781 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 11:23:15,781 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 11:23:15,782 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 11:23:15,782 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 11:23:15,783 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-12-13 11:23:15,809 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 11:23:15,809 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 11:23:15,809 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 11:23:15,810 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 11:23:15,810 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 11:23:15,811 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 11:23:15,811 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 11:23:15,811 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-12-13 11:23:15,811 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-12-13 11:23:15,811 INFO L138 SettingsManager]: * Use old map elimination=false [2022-12-13 11:23:15,811 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-12-13 11:23:15,811 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-12-13 11:23:15,812 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-12-13 11:23:15,812 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 11:23:15,812 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 11:23:15,812 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-13 11:23:15,812 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 11:23:15,812 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 11:23:15,813 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 11:23:15,813 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-12-13 11:23:15,813 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-12-13 11:23:15,813 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-12-13 11:23:15,813 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 11:23:15,813 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 11:23:15,814 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-12-13 11:23:15,814 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 11:23:15,814 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-12-13 11:23:15,814 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 11:23:15,814 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 11:23:15,815 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 11:23:15,815 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 11:23:15,816 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-12-13 11:23:15,816 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef17cfb4a2c8358ea255253edc0610051a64c94a86cd92ff89d3b074c51925f6 [2022-12-13 11:23:15,986 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 11:23:16,005 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 11:23:16,008 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 11:23:16,009 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 11:23:16,009 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 11:23:16,010 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c [2022-12-13 11:23:18,558 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 11:23:18,804 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 11:23:18,804 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c [2022-12-13 11:23:18,816 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/data/2581b1359/357d0c805abe452998b361a60b700920/FLAGf6919ab33 [2022-12-13 11:23:18,829 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/data/2581b1359/357d0c805abe452998b361a60b700920 [2022-12-13 11:23:18,831 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 11:23:18,832 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 11:23:18,832 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 11:23:18,833 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 11:23:18,835 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 11:23:18,836 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 11:23:18" (1/1) ... [2022-12-13 11:23:18,837 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4444a23c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:18, skipping insertion in model container [2022-12-13 11:23:18,837 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 11:23:18" (1/1) ... [2022-12-13 11:23:18,843 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 11:23:18,895 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 11:23:19,025 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c[1811,1824] [2022-12-13 11:23:19,214 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 11:23:19,224 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 11:23:19,233 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/sv-benchmarks/c/product-lines/elevator_spec13_product23.cil.c[1811,1824] [2022-12-13 11:23:19,296 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 11:23:19,314 INFO L208 MainTranslator]: Completed translation [2022-12-13 11:23:19,314 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19 WrapperNode [2022-12-13 11:23:19,314 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 11:23:19,315 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 11:23:19,315 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 11:23:19,315 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 11:23:19,321 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:19,348 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:19,619 INFO L138 Inliner]: procedures = 94, calls = 346, calls flagged for inlining = 199, calls inlined = 1005, statements flattened = 35272 [2022-12-13 11:23:19,619 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 11:23:19,620 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 11:23:19,620 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 11:23:19,620 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 11:23:19,627 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:19,627 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:19,658 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:19,659 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:19,822 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:19,968 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:20,000 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:20,031 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:20,116 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 11:23:20,117 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 11:23:20,117 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 11:23:20,117 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 11:23:20,117 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (1/1) ... [2022-12-13 11:23:20,122 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:20,130 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 11:23:20,140 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 11:23:20,142 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-12-13 11:23:20,177 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 11:23:20,177 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 11:23:20,177 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 11:23:20,177 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 11:23:20,324 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 11:23:20,326 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 11:23:28,563 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 11:23:28,596 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 11:23:28,596 INFO L300 CfgBuilder]: Removed 61 assume(true) statements. [2022-12-13 11:23:28,605 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 11:23:28 BoogieIcfgContainer [2022-12-13 11:23:28,605 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 11:23:28,606 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-12-13 11:23:28,606 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-12-13 11:23:28,609 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-12-13 11:23:28,609 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 11:23:28,610 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.12 11:23:18" (1/3) ... [2022-12-13 11:23:28,610 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@40f92e91 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 11:23:28, skipping insertion in model container [2022-12-13 11:23:28,610 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 11:23:28,610 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 11:23:19" (2/3) ... [2022-12-13 11:23:28,611 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@40f92e91 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 11:23:28, skipping insertion in model container [2022-12-13 11:23:28,611 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 11:23:28,611 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 11:23:28" (3/3) ... [2022-12-13 11:23:28,612 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product23.cil.c [2022-12-13 11:23:28,759 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-12-13 11:23:28,759 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-12-13 11:23:28,759 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-12-13 11:23:28,759 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-12-13 11:23:28,759 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-12-13 11:23:28,759 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-12-13 11:23:28,759 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-12-13 11:23:28,759 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-12-13 11:23:28,788 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9457 states, 9456 states have (on average 1.8765862944162437) internal successors, (17745), 9456 states have internal predecessors, (17745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:28,947 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2377 [2022-12-13 11:23:28,947 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:28,947 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:28,953 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:28,953 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:28,953 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-12-13 11:23:28,964 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9457 states, 9456 states have (on average 1.8765862944162437) internal successors, (17745), 9456 states have internal predecessors, (17745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:29,037 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2377 [2022-12-13 11:23:29,037 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:29,037 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:29,038 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:29,038 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:29,043 INFO L748 eck$LassoCheckResult]: Stem: 4890#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4624#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 7957#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7586#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 654#valid_product_returnLabel#1true main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 7856#L2329true assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1523#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1599#L1917true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 2507#getOrigin_returnLabel#1true aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 8838#L3097true assume 0 == initPersonOnFloor_~floor#1; 3711#L3098true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4792#L3205-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 7677#L2889true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 8508#L2901-2true assume { :end_inline_callOnFloor } true; 968#initPersonOnFloor_returnLabel#1true assume { :end_inline_initPersonOnFloor } true; 7534#aliceCall_returnLabel#1true assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 6725#L1917-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 366#getOrigin_returnLabel#2true angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5430#L3097-1true assume 0 == initPersonOnFloor_~floor#1; 3676#L3098-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2195#L3205-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2679#L2889-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4076#L2901-5true assume { :end_inline_callOnFloor } true; 3304#initPersonOnFloor_returnLabel#2true assume { :end_inline_initPersonOnFloor } true; 7749#angelinaCall_returnLabel#1true assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 7145#getCurrentHeading_returnLabel#1true __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 3598#__utac_acc__Specification13_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 7457#L2826true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 7119#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 8724#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 2331#L1244true assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3381#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 7116#L1248true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 242#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 4571#L1397true assume !(0 != timeShift_~tmp___9~2#1); 4249#L1488true assume 1 == ~doorState~0;~doorState~0 := 0; 1797#L1488-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 6974#L2826-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 2718#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 5652#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 4950#L1099true assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 9277#getCurrentFloorID_returnLabel#4true stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1615#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 66#L1496true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1422#L1156true assume !(1 == ~currentHeading~0); 81#L1166true assume !(0 == ~currentFloorID~0); 2327#L1166-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9106#L1172-1true assume { :end_inline_continueInDirection } true; 7975#L1505-2true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1165#L108true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 3926#L109true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 783#L1700true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~2#1 := 0;existInLiftCallsInDirection_~i~2#1 := 1 + ~currentFloorID~0; 5965#L1704-2true [2022-12-13 11:23:29,043 INFO L750 eck$LassoCheckResult]: Loop: 5965#L1704-2true assume !false; 8922#L1705true assume existInLiftCallsInDirection_~i~2#1 < 5; 8052#L1706true assume !(0 == existInLiftCallsInDirection_~i~2#1); 6224#$Ultimate##3680true assume !(1 == existInLiftCallsInDirection_~i~2#1); 5337#$Ultimate##3684true assume !(2 == existInLiftCallsInDirection_~i~2#1); 448#$Ultimate##3688true assume !(3 == existInLiftCallsInDirection_~i~2#1); 8176#$Ultimate##3692true assume !(4 == existInLiftCallsInDirection_~i~2#1); 8686#L1747-1true existInLiftCallsInDirection_~i~2#1 := 1 + existInLiftCallsInDirection_~i~2#1; 5965#L1704-2true [2022-12-13 11:23:29,048 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:29,049 INFO L85 PathProgramCache]: Analyzing trace with hash -377515284, now seen corresponding path program 1 times [2022-12-13 11:23:29,055 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:29,055 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [102465135] [2022-12-13 11:23:29,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:29,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:29,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:29,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:29,366 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:29,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [102465135] [2022-12-13 11:23:29,367 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [102465135] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:29,368 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:29,368 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 11:23:29,369 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1525617516] [2022-12-13 11:23:29,370 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:29,374 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:29,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:29,375 INFO L85 PathProgramCache]: Analyzing trace with hash 1111738493, now seen corresponding path program 1 times [2022-12-13 11:23:29,375 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:29,375 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326111742] [2022-12-13 11:23:29,375 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:29,375 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:29,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:29,383 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:29,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:29,403 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:29,454 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 11:23:29,454 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 11:23:29,455 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 11:23:29,455 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 11:23:29,455 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-12-13 11:23:29,455 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:29,455 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 11:23:29,455 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 11:23:29,455 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product23.cil.c_Iteration1_Loop [2022-12-13 11:23:29,455 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 11:23:29,455 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 11:23:29,472 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 11:23:29,534 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 11:23:29,535 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-12-13 11:23:29,537 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:29,537 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 11:23:29,538 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 11:23:29,539 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-12-13 11:23:29,540 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 11:23:29,541 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 11:23:29,557 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-12-13 11:23:29,557 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:29,557 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 11:23:29,558 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 11:23:29,559 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-12-13 11:23:29,561 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-12-13 11:23:29,561 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 11:23:29,582 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-12-13 11:23:29,585 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-12-13 11:23:29,585 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 11:23:29,586 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 11:23:29,586 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 11:23:29,586 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 11:23:29,586 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-12-13 11:23:29,586 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:29,586 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 11:23:29,586 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 11:23:29,586 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product23.cil.c_Iteration1_Loop [2022-12-13 11:23:29,586 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 11:23:29,586 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 11:23:29,588 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 11:23:29,634 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 11:23:29,638 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-12-13 11:23:29,638 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:29,639 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 11:23:29,640 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 11:23:29,640 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-12-13 11:23:29,642 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 11:23:29,652 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 11:23:29,653 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 11:23:29,653 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 11:23:29,653 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 11:23:29,653 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 11:23:29,655 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 11:23:29,655 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 11:23:29,658 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-12-13 11:23:29,665 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-12-13 11:23:29,665 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-12-13 11:23:29,666 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:29,666 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 11:23:29,689 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 11:23:29,690 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-12-13 11:23:29,691 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-12-13 11:23:29,691 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-12-13 11:23:29,691 INFO L513 LassoAnalysis]: Proved termination. [2022-12-13 11:23:29,692 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~2#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~2#1 Supporting invariants [] [2022-12-13 11:23:29,695 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2022-12-13 11:23:29,697 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-12-13 11:23:29,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:29,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:29,814 INFO L263 TraceCheckSpWp]: Trace formula consists of 623 conjuncts, 2 conjunts are in the unsatisfiable core [2022-12-13 11:23:29,816 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 11:23:29,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:29,882 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-13 11:23:29,882 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 11:23:30,040 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:30,067 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2022-12-13 11:23:30,089 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 9457 states, 9456 states have (on average 1.8765862944162437) internal successors, (17745), 9456 states have internal predecessors, (17745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:30,675 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2022-12-13 11:23:33,826 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 9457 states, 9456 states have (on average 1.8765862944162437) internal successors, (17745), 9456 states have internal predecessors, (17745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 107651 states and 201837 transitions. Complement of second has 18 states. [2022-12-13 11:23:33,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2022-12-13 11:23:33,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.666666666666667) internal successors, (60), 9 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:33,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 109799 transitions. [2022-12-13 11:23:33,945 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 109799 transitions. Stem has 52 letters. Loop has 8 letters. [2022-12-13 11:23:33,945 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 11:23:33,946 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 109799 transitions. Stem has 60 letters. Loop has 8 letters. [2022-12-13 11:23:33,946 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 11:23:33,946 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 109799 transitions. Stem has 52 letters. Loop has 16 letters. [2022-12-13 11:23:33,946 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 11:23:33,947 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 107651 states and 201837 transitions. [2022-12-13 11:23:34,401 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15168 [2022-12-13 11:23:34,719 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 107651 states to 58440 states and 109522 transitions. [2022-12-13 11:23:34,720 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58410 [2022-12-13 11:23:34,790 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58411 [2022-12-13 11:23:34,791 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58440 states and 109522 transitions. [2022-12-13 11:23:34,795 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:34,795 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58440 states and 109522 transitions. [2022-12-13 11:23:34,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58440 states and 109522 transitions. [2022-12-13 11:23:35,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58440 to 16991. [2022-12-13 11:23:35,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16991 states, 16991 states have (on average 1.8692837384497676) internal successors, (31761), 16990 states have internal predecessors, (31761), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:35,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16991 states to 16991 states and 31761 transitions. [2022-12-13 11:23:35,226 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16991 states and 31761 transitions. [2022-12-13 11:23:35,226 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:35,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 11:23:35,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 11:23:35,231 INFO L87 Difference]: Start difference. First operand 16991 states and 31761 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:35,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:35,613 INFO L93 Difference]: Finished difference Result 24550 states and 45741 transitions. [2022-12-13 11:23:35,613 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24550 states and 45741 transitions. [2022-12-13 11:23:35,708 INFO L131 ngComponentsAnalysis]: Automaton has 78 accepting balls. 8686 [2022-12-13 11:23:35,825 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24550 states to 24537 states and 45728 transitions. [2022-12-13 11:23:35,825 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24518 [2022-12-13 11:23:35,839 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24518 [2022-12-13 11:23:35,839 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24537 states and 45728 transitions. [2022-12-13 11:23:35,840 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:35,840 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24537 states and 45728 transitions. [2022-12-13 11:23:35,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24537 states and 45728 transitions. [2022-12-13 11:23:36,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24537 to 9454. [2022-12-13 11:23:36,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9454 states, 9454 states have (on average 1.863655595515126) internal successors, (17619), 9453 states have internal predecessors, (17619), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:36,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9454 states to 9454 states and 17619 transitions. [2022-12-13 11:23:36,037 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9454 states and 17619 transitions. [2022-12-13 11:23:36,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 11:23:36,038 INFO L428 stractBuchiCegarLoop]: Abstraction has 9454 states and 17619 transitions. [2022-12-13 11:23:36,039 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-12-13 11:23:36,039 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9454 states and 17619 transitions. [2022-12-13 11:23:36,071 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2377 [2022-12-13 11:23:36,072 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:36,072 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:36,073 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:36,073 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:36,074 INFO L748 eck$LassoCheckResult]: Stem: 166406#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 166155#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 166156#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 167995#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 160493#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 160494#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 162181#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 162182#L1917 assume !(0 == getOrigin_~person#1); 162316#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 160471#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 163740#L3097 assume 0 == initPersonOnFloor_~floor#1; 165254#L3098 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 160197#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 166311#L2889 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 161793#L2901-2 assume { :end_inline_callOnFloor } true; 161133#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 161134#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 167658#L1917-1 assume !(0 == getOrigin_~person#1); 164076#L1921-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 159664#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 159818#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 165212#L3098-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 159099#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 163281#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 163994#L2901-5 assume { :end_inline_callOnFloor } true; 164786#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 164787#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 167827#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 165114#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 165115#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 160554#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 167818#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 163481#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 163483#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 164891#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 159508#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 159509#L1397 assume !(0 != timeShift_~tmp___9~2#1); 165793#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 162654#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 162655#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 164044#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 164045#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 166468#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 166469#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 162339#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 159059#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 159060#L1156 assume !(1 == ~currentHeading~0); 159101#L1166 assume !(0 == ~currentFloorID~0); 159102#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 163476#L1172-1 assume { :end_inline_continueInDirection } true; 167168#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 161532#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 161534#L109 assume !(1 == ~prevDir~0); 165490#L135 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 165775#L1700-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~2#1 := 0;existInLiftCallsInDirection_~i~2#1 := 1 + ~currentFloorID~0; 161760#L1704-8 [2022-12-13 11:23:36,074 INFO L750 eck$LassoCheckResult]: Loop: 161760#L1704-8 assume !false; 161761#L1705-2 assume existInLiftCallsInDirection_~i~2#1 < 5; 162335#L1706-2 assume !(0 == existInLiftCallsInDirection_~i~2#1); 166980#$Ultimate##3836 assume !(1 == existInLiftCallsInDirection_~i~2#1); 166028#$Ultimate##3840 assume !(2 == existInLiftCallsInDirection_~i~2#1); 159194#$Ultimate##3844 assume !(3 == existInLiftCallsInDirection_~i~2#1); 159195#$Ultimate##3848 assume !(4 == existInLiftCallsInDirection_~i~2#1); 163607#L1747-5 existInLiftCallsInDirection_~i~2#1 := 1 + existInLiftCallsInDirection_~i~2#1; 161760#L1704-8 [2022-12-13 11:23:36,074 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:36,075 INFO L85 PathProgramCache]: Analyzing trace with hash 1707394713, now seen corresponding path program 1 times [2022-12-13 11:23:36,075 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:36,075 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [652660002] [2022-12-13 11:23:36,075 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:36,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:36,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:36,244 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:36,245 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:36,245 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [652660002] [2022-12-13 11:23:36,245 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [652660002] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:36,245 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:36,246 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 11:23:36,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1816781615] [2022-12-13 11:23:36,246 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:36,246 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:36,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:36,247 INFO L85 PathProgramCache]: Analyzing trace with hash -1105989763, now seen corresponding path program 1 times [2022-12-13 11:23:36,247 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:36,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1086179141] [2022-12-13 11:23:36,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:36,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:36,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:36,252 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:36,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:36,257 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:36,289 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 11:23:36,290 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 11:23:36,290 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 11:23:36,290 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 11:23:36,290 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-12-13 11:23:36,290 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:36,290 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 11:23:36,290 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 11:23:36,290 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product23.cil.c_Iteration2_Loop [2022-12-13 11:23:36,290 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 11:23:36,290 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 11:23:36,291 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 11:23:36,326 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 11:23:36,327 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-12-13 11:23:36,327 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:36,327 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 11:23:36,328 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 11:23:36,329 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-12-13 11:23:36,330 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 11:23:36,330 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 11:23:36,345 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2022-12-13 11:23:36,345 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:36,345 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 11:23:36,346 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 11:23:36,347 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-12-13 11:23:36,348 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-12-13 11:23:36,348 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 11:23:36,369 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-12-13 11:23:36,372 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Ended with exit code 0 [2022-12-13 11:23:36,372 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 11:23:36,372 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 11:23:36,372 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 11:23:36,372 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 11:23:36,372 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-12-13 11:23:36,372 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:36,373 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 11:23:36,373 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 11:23:36,373 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product23.cil.c_Iteration2_Loop [2022-12-13 11:23:36,373 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 11:23:36,373 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 11:23:36,374 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 11:23:36,404 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 11:23:36,404 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-12-13 11:23:36,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:36,405 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 11:23:36,406 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 11:23:36,406 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-12-13 11:23:36,407 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 11:23:36,418 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 11:23:36,418 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 11:23:36,418 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 11:23:36,418 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 11:23:36,418 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 11:23:36,419 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 11:23:36,419 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 11:23:36,421 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-12-13 11:23:36,424 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2022-12-13 11:23:36,424 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2022-12-13 11:23:36,424 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 11:23:36,424 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 11:23:36,425 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 11:23:36,426 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-12-13 11:23:36,427 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-12-13 11:23:36,427 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-12-13 11:23:36,427 INFO L513 LassoAnalysis]: Proved termination. [2022-12-13 11:23:36,427 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~2#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~2#1 Supporting invariants [] [2022-12-13 11:23:36,430 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2022-12-13 11:23:36,430 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-12-13 11:23:36,440 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:36,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:36,513 INFO L263 TraceCheckSpWp]: Trace formula consists of 626 conjuncts, 2 conjunts are in the unsatisfiable core [2022-12-13 11:23:36,516 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 11:23:36,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:36,572 WARN L261 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-13 11:23:36,573 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 11:23:36,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:36,686 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2022-12-13 11:23:36,686 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 9454 states and 17619 transitions. cyclomatic complexity: 8199 Second operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:37,325 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_715a2d10-aed0-4ff7-be5f-e020dfc53663/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2022-12-13 11:23:39,959 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 9454 states and 17619 transitions. cyclomatic complexity: 8199. Second operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 99878 states and 187113 transitions. Complement of second has 17 states. [2022-12-13 11:23:39,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2022-12-13 11:23:39,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 9 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:40,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 95284 transitions. [2022-12-13 11:23:40,049 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 95284 transitions. Stem has 55 letters. Loop has 8 letters. [2022-12-13 11:23:40,049 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 11:23:40,049 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 95284 transitions. Stem has 63 letters. Loop has 8 letters. [2022-12-13 11:23:40,050 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 11:23:40,050 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 95284 transitions. Stem has 55 letters. Loop has 16 letters. [2022-12-13 11:23:40,050 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 11:23:40,050 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 99878 states and 187113 transitions. [2022-12-13 11:23:40,483 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 15168 [2022-12-13 11:23:40,668 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 99878 states to 58446 states and 109429 transitions. [2022-12-13 11:23:40,668 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58397 [2022-12-13 11:23:40,712 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58398 [2022-12-13 11:23:40,712 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58446 states and 109429 transitions. [2022-12-13 11:23:40,718 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:40,718 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58446 states and 109429 transitions. [2022-12-13 11:23:40,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58446 states and 109429 transitions. [2022-12-13 11:23:40,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58446 to 9478. [2022-12-13 11:23:40,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9478 states, 9478 states have (on average 1.8629457691496096) internal successors, (17657), 9477 states have internal predecessors, (17657), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:41,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9478 states to 9478 states and 17657 transitions. [2022-12-13 11:23:41,006 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9478 states and 17657 transitions. [2022-12-13 11:23:41,006 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:41,007 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 11:23:41,007 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 11:23:41,007 INFO L87 Difference]: Start difference. First operand 9478 states and 17657 transitions. Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:41,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:41,553 INFO L93 Difference]: Finished difference Result 28217 states and 52541 transitions. [2022-12-13 11:23:41,553 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28217 states and 52541 transitions. [2022-12-13 11:23:41,660 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7143 [2022-12-13 11:23:41,748 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28217 states to 28217 states and 52541 transitions. [2022-12-13 11:23:41,748 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28103 [2022-12-13 11:23:41,766 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28103 [2022-12-13 11:23:41,766 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28217 states and 52541 transitions. [2022-12-13 11:23:41,769 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:41,769 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28217 states and 52541 transitions. [2022-12-13 11:23:41,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28217 states and 52541 transitions. [2022-12-13 11:23:41,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28217 to 9493. [2022-12-13 11:23:41,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9493 states, 9493 states have (on average 1.8615822184767723) internal successors, (17672), 9492 states have internal predecessors, (17672), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:41,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9493 states to 9493 states and 17672 transitions. [2022-12-13 11:23:41,932 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9493 states and 17672 transitions. [2022-12-13 11:23:41,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 11:23:41,933 INFO L428 stractBuchiCegarLoop]: Abstraction has 9493 states and 17672 transitions. [2022-12-13 11:23:41,933 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-12-13 11:23:41,933 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9493 states and 17672 transitions. [2022-12-13 11:23:41,957 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:41,957 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:41,957 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:41,958 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:41,958 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:41,958 INFO L748 eck$LassoCheckResult]: Stem: 313677#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 313425#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 313426#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 315277#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 307756#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 307757#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 309447#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 309448#L1917 assume !(0 == getOrigin_~person#1); 309582#L1921 assume !(1 == getOrigin_~person#1); 314846#L1925 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 307734#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 311007#L3097 assume 0 == initPersonOnFloor_~floor#1; 312522#L3098 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 307460#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 313582#L2889 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 309058#L2901-2 assume { :end_inline_callOnFloor } true; 308396#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 308397#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 314938#L1917-1 assume !(0 == getOrigin_~person#1); 311343#L1921-1 assume !(1 == getOrigin_~person#1); 309402#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 306928#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 315622#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 312480#L3098-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 306360#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 310547#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 311261#L2901-5 assume { :end_inline_callOnFloor } true; 312054#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 312055#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 315109#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 312382#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 312383#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 307817#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 315100#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 310747#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 310749#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 312159#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 306772#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 306773#L1397 assume !(0 != timeShift_~tmp___9~2#1); 313061#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 309921#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 309922#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 311311#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 311312#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 313738#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 313739#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 309606#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 306320#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 306321#L1156 assume !(1 == ~currentHeading~0); 306362#L1166 assume !(0 == ~currentFloorID~0); 306363#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 310742#L1172-1 assume { :end_inline_continueInDirection } true; 314444#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 308795#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 308797#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 308017#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 308018#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 313319#L1770-2 [2022-12-13 11:23:41,958 INFO L750 eck$LassoCheckResult]: Loop: 313319#L1770-2 assume !false; 309381#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 309382#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 306284#L1779-2 assume !false; 312571#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 312573#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 313319#L1770-2 [2022-12-13 11:23:41,958 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:41,958 INFO L85 PathProgramCache]: Analyzing trace with hash 992492226, now seen corresponding path program 1 times [2022-12-13 11:23:41,958 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:41,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1432800048] [2022-12-13 11:23:41,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:41,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:41,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:42,007 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:42,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:42,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1432800048] [2022-12-13 11:23:42,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1432800048] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:42,008 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:42,008 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 11:23:42,008 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2061235653] [2022-12-13 11:23:42,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:42,009 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:42,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:42,009 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 1 times [2022-12-13 11:23:42,009 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:42,010 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1151323200] [2022-12-13 11:23:42,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:42,010 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:42,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:42,014 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:42,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:42,018 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:42,043 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:42,043 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 11:23:42,043 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 11:23:42,043 INFO L87 Difference]: Start difference. First operand 9493 states and 17672 transitions. cyclomatic complexity: 8214 Second operand has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:42,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:42,283 INFO L93 Difference]: Finished difference Result 18807 states and 35017 transitions. [2022-12-13 11:23:42,283 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18807 states and 35017 transitions. [2022-12-13 11:23:42,338 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4762 [2022-12-13 11:23:42,380 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18807 states to 18807 states and 35017 transitions. [2022-12-13 11:23:42,380 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18731 [2022-12-13 11:23:42,391 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18731 [2022-12-13 11:23:42,391 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18807 states and 35017 transitions. [2022-12-13 11:23:42,402 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:42,402 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18807 states and 35017 transitions. [2022-12-13 11:23:42,418 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18807 states and 35017 transitions. [2022-12-13 11:23:42,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18807 to 9459. [2022-12-13 11:23:42,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9459 states, 9459 states have (on average 1.8610846812559467) internal successors, (17604), 9458 states have internal predecessors, (17604), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:42,534 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9459 states to 9459 states and 17604 transitions. [2022-12-13 11:23:42,534 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9459 states and 17604 transitions. [2022-12-13 11:23:42,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 11:23:42,535 INFO L428 stractBuchiCegarLoop]: Abstraction has 9459 states and 17604 transitions. [2022-12-13 11:23:42,535 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-12-13 11:23:42,535 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9459 states and 17604 transitions. [2022-12-13 11:23:42,557 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:42,557 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:42,557 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:42,558 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:42,558 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:42,558 INFO L748 eck$LassoCheckResult]: Stem: 341959#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 341710#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 341711#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 343555#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 336059#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 336060#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 337747#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 337748#L1917 assume !(0 == getOrigin_~person#1); 337882#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 339304#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 339305#L3097 assume !(0 == initPersonOnFloor_~floor#1); 343761#L3124 assume !(1 == initPersonOnFloor_~floor#1); 335644#L3151 assume !(2 == initPersonOnFloor_~floor#1); 335645#L3178 assume 3 == initPersonOnFloor_~floor#1; 341963#L3179 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 335766#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 341864#L2889 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 337360#L2901-2 assume { :end_inline_callOnFloor } true; 336698#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 336699#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 343217#L1917-1 assume !(0 == getOrigin_~person#1); 339639#L1921-1 assume !(1 == getOrigin_~person#1); 337702#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 335234#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 343894#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 340774#L3098-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 334666#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 338846#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 339557#L2901-5 assume { :end_inline_callOnFloor } true; 340350#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 340351#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 343387#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 340676#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 340677#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 336123#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 343378#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 339044#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 339046#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 340453#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 335078#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 335079#L1397 assume !(0 != timeShift_~tmp___9~2#1); 341349#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 338220#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 338221#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 339607#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 339608#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 342020#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 342021#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 337907#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 334626#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 334627#L1156 assume !(1 == ~currentHeading~0); 334668#L1166 assume !(0 == ~currentFloorID~0); 334669#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 339039#L1172-1 assume { :end_inline_continueInDirection } true; 342725#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 337097#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 337099#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 336319#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 336320#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 341607#L1770-2 [2022-12-13 11:23:42,558 INFO L750 eck$LassoCheckResult]: Loop: 341607#L1770-2 assume !false; 337681#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 337682#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 334593#L1779-2 assume !false; 340863#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 340865#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 341607#L1770-2 [2022-12-13 11:23:42,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:42,559 INFO L85 PathProgramCache]: Analyzing trace with hash -1486168651, now seen corresponding path program 1 times [2022-12-13 11:23:42,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:42,559 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1891594126] [2022-12-13 11:23:42,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:42,560 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:42,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:42,662 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:42,662 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:42,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1891594126] [2022-12-13 11:23:42,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1891594126] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:42,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:42,662 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 11:23:42,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [591783732] [2022-12-13 11:23:42,663 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:42,663 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:42,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:42,664 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 2 times [2022-12-13 11:23:42,664 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:42,664 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1727595963] [2022-12-13 11:23:42,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:42,664 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:42,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:42,668 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:42,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:42,674 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:42,688 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:42,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 11:23:42,689 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 11:23:42,689 INFO L87 Difference]: Start difference. First operand 9459 states and 17604 transitions. cyclomatic complexity: 8180 Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:43,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:43,028 INFO L93 Difference]: Finished difference Result 13205 states and 24576 transitions. [2022-12-13 11:23:43,028 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13205 states and 24576 transitions. [2022-12-13 11:23:43,072 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4394 [2022-12-13 11:23:43,106 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13205 states to 13205 states and 24576 transitions. [2022-12-13 11:23:43,106 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13167 [2022-12-13 11:23:43,115 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13167 [2022-12-13 11:23:43,115 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13205 states and 24576 transitions. [2022-12-13 11:23:43,116 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:43,116 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13205 states and 24576 transitions. [2022-12-13 11:23:43,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13205 states and 24576 transitions. [2022-12-13 11:23:43,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13205 to 9459. [2022-12-13 11:23:43,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9459 states, 9459 states have (on average 1.8604503647320012) internal successors, (17598), 9458 states have internal predecessors, (17598), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:43,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9459 states to 9459 states and 17598 transitions. [2022-12-13 11:23:43,229 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9459 states and 17598 transitions. [2022-12-13 11:23:43,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 11:23:43,231 INFO L428 stractBuchiCegarLoop]: Abstraction has 9459 states and 17598 transitions. [2022-12-13 11:23:43,231 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-12-13 11:23:43,231 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9459 states and 17598 transitions. [2022-12-13 11:23:43,341 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:43,341 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:43,341 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:43,342 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:43,342 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:43,342 INFO L748 eck$LassoCheckResult]: Stem: 364636#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 364387#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 364388#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 366233#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 358736#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 358737#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 360424#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 360425#L1917 assume !(0 == getOrigin_~person#1); 360559#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 361981#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 361982#L3097 assume !(0 == initPersonOnFloor_~floor#1); 366439#L3124 assume !(1 == initPersonOnFloor_~floor#1); 358319#L3151 assume !(2 == initPersonOnFloor_~floor#1); 358320#L3178 assume 3 == initPersonOnFloor_~floor#1; 364640#L3179 assume !(0 == initPersonOnFloor_~person#1); 361137#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 358443#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 364541#L2889 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 360037#L2901-2 assume { :end_inline_callOnFloor } true; 359375#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 359376#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 365894#L1917-1 assume !(0 == getOrigin_~person#1); 362316#L1921-1 assume !(1 == getOrigin_~person#1); 360379#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 357911#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 366571#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 363451#L3098-2 assume !(0 == initPersonOnFloor_~person#1); 363312#L3101-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 357343#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 361523#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 362234#L2901-5 assume { :end_inline_callOnFloor } true; 363027#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 363028#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 366065#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 363353#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 363354#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 358797#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 366056#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 361721#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 361723#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 363130#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 357755#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 357756#L1397 assume !(0 != timeShift_~tmp___9~2#1); 364026#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 360897#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 360898#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 362284#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 362285#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 364697#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 364698#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 360583#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 357303#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 357304#L1156 assume !(1 == ~currentHeading~0); 357345#L1166 assume !(0 == ~currentFloorID~0); 357346#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 361716#L1172-1 assume { :end_inline_continueInDirection } true; 365402#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 359774#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 359776#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 358996#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 358997#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 364284#L1770-2 [2022-12-13 11:23:43,342 INFO L750 eck$LassoCheckResult]: Loop: 364284#L1770-2 assume !false; 360358#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 360359#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 357267#L1779-2 assume !false; 363540#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 363542#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 364284#L1770-2 [2022-12-13 11:23:43,342 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:43,343 INFO L85 PathProgramCache]: Analyzing trace with hash -1146851719, now seen corresponding path program 1 times [2022-12-13 11:23:43,343 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:43,343 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1260730855] [2022-12-13 11:23:43,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:43,343 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:43,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:43,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:43,406 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:43,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1260730855] [2022-12-13 11:23:43,406 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1260730855] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:43,406 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:43,407 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 11:23:43,407 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1401714270] [2022-12-13 11:23:43,407 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:43,407 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:43,407 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:43,408 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 3 times [2022-12-13 11:23:43,408 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:43,408 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1360323091] [2022-12-13 11:23:43,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:43,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:43,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:43,411 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:43,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:43,415 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:43,430 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:43,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 11:23:43,431 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 11:23:43,431 INFO L87 Difference]: Start difference. First operand 9459 states and 17598 transitions. cyclomatic complexity: 8174 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:43,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:43,863 INFO L93 Difference]: Finished difference Result 28176 states and 52455 transitions. [2022-12-13 11:23:43,863 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28176 states and 52455 transitions. [2022-12-13 11:23:43,955 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7143 [2022-12-13 11:23:44,024 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28176 states to 28176 states and 52455 transitions. [2022-12-13 11:23:44,024 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28062 [2022-12-13 11:23:44,042 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28062 [2022-12-13 11:23:44,042 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28176 states and 52455 transitions. [2022-12-13 11:23:44,045 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:44,045 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28176 states and 52455 transitions. [2022-12-13 11:23:44,061 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28176 states and 52455 transitions. [2022-12-13 11:23:44,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28176 to 9463. [2022-12-13 11:23:44,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9463 states, 9463 states have (on average 1.8599809785480292) internal successors, (17601), 9462 states have internal predecessors, (17601), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:44,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9463 states to 9463 states and 17601 transitions. [2022-12-13 11:23:44,191 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9463 states and 17601 transitions. [2022-12-13 11:23:44,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 11:23:44,192 INFO L428 stractBuchiCegarLoop]: Abstraction has 9463 states and 17601 transitions. [2022-12-13 11:23:44,192 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-12-13 11:23:44,193 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9463 states and 17601 transitions. [2022-12-13 11:23:44,229 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:44,229 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:44,229 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:44,230 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:44,230 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:44,230 INFO L748 eck$LassoCheckResult]: Stem: 402283#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 402034#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 402035#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 403880#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 396381#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 396382#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 398070#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 398071#L1917 assume !(0 == getOrigin_~person#1); 398205#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 399627#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 399628#L3097 assume !(0 == initPersonOnFloor_~floor#1); 404086#L3124 assume !(1 == initPersonOnFloor_~floor#1); 395964#L3151 assume !(2 == initPersonOnFloor_~floor#1); 395965#L3178 assume 3 == initPersonOnFloor_~floor#1; 402287#L3179 assume !(0 == initPersonOnFloor_~person#1); 398783#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 396088#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 402188#L2889 assume !(0 == callOnFloor_~floorID#1); 397682#L2892 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 397683#L2901-2 assume { :end_inline_callOnFloor } true; 397020#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 397021#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 403541#L1917-1 assume !(0 == getOrigin_~person#1); 399962#L1921-1 assume !(1 == getOrigin_~person#1); 398025#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 395555#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 404218#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 401098#L3098-2 assume !(0 == initPersonOnFloor_~person#1); 400959#L3101-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 394987#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 399169#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 400784#L2901-5 assume { :end_inline_callOnFloor } true; 400673#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 400674#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 403712#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 401000#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 401001#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 396442#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 403703#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 399367#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 399369#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 400776#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 395399#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 395400#L1397 assume !(0 != timeShift_~tmp___9~2#1); 401673#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 398543#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 398544#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 399930#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 399931#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 402344#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 402345#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 398229#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 394947#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 394948#L1156 assume !(1 == ~currentHeading~0); 394989#L1166 assume !(0 == ~currentFloorID~0); 394990#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399362#L1172-1 assume { :end_inline_continueInDirection } true; 403049#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 397419#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 397421#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 396641#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 396642#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 401931#L1770-2 [2022-12-13 11:23:44,230 INFO L750 eck$LassoCheckResult]: Loop: 401931#L1770-2 assume !false; 398004#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 398005#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 394911#L1779-2 assume !false; 401187#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 401189#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 401931#L1770-2 [2022-12-13 11:23:44,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:44,231 INFO L85 PathProgramCache]: Analyzing trace with hash -1965093356, now seen corresponding path program 1 times [2022-12-13 11:23:44,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:44,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [513970454] [2022-12-13 11:23:44,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:44,232 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:44,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:44,302 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:44,302 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:44,302 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [513970454] [2022-12-13 11:23:44,302 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [513970454] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:44,302 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:44,303 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 11:23:44,303 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [426612105] [2022-12-13 11:23:44,303 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:44,303 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:44,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:44,303 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 4 times [2022-12-13 11:23:44,304 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:44,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1477482137] [2022-12-13 11:23:44,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:44,304 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:44,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:44,307 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:44,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:44,311 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:44,326 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:44,326 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 11:23:44,327 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 11:23:44,327 INFO L87 Difference]: Start difference. First operand 9463 states and 17601 transitions. cyclomatic complexity: 8173 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:44,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:44,745 INFO L93 Difference]: Finished difference Result 28181 states and 52457 transitions. [2022-12-13 11:23:44,745 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28181 states and 52457 transitions. [2022-12-13 11:23:44,835 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7143 [2022-12-13 11:23:44,903 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28181 states to 28181 states and 52457 transitions. [2022-12-13 11:23:44,903 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28067 [2022-12-13 11:23:44,921 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28067 [2022-12-13 11:23:44,921 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28181 states and 52457 transitions. [2022-12-13 11:23:44,922 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:44,922 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28181 states and 52457 transitions. [2022-12-13 11:23:44,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28181 states and 52457 transitions. [2022-12-13 11:23:45,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28181 to 9469. [2022-12-13 11:23:45,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9469 states, 9469 states have (on average 1.8593304467208787) internal successors, (17606), 9468 states have internal predecessors, (17606), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:45,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9469 states to 9469 states and 17606 transitions. [2022-12-13 11:23:45,067 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9469 states and 17606 transitions. [2022-12-13 11:23:45,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 11:23:45,068 INFO L428 stractBuchiCegarLoop]: Abstraction has 9469 states and 17606 transitions. [2022-12-13 11:23:45,068 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-12-13 11:23:45,068 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9469 states and 17606 transitions. [2022-12-13 11:23:45,089 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:45,090 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:45,090 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:45,090 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:45,090 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:45,091 INFO L748 eck$LassoCheckResult]: Stem: 439937#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 439688#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 439689#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 441536#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 434034#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 434035#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 435722#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 435723#L1917 assume !(0 == getOrigin_~person#1); 435857#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 437281#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 437282#L3097 assume !(0 == initPersonOnFloor_~floor#1); 441742#L3124 assume !(1 == initPersonOnFloor_~floor#1); 433617#L3151 assume !(2 == initPersonOnFloor_~floor#1); 433618#L3178 assume 3 == initPersonOnFloor_~floor#1; 439941#L3179 assume !(0 == initPersonOnFloor_~person#1); 436437#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 433741#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 439842#L2889 assume !(0 == callOnFloor_~floorID#1); 435335#L2892 assume !(1 == callOnFloor_~floorID#1); 435336#L2895 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 440149#L2901-2 assume { :end_inline_callOnFloor } true; 434673#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 434674#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 441197#L1917-1 assume !(0 == getOrigin_~person#1); 437615#L1921-1 assume !(1 == getOrigin_~person#1); 435677#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 433208#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 441874#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 438751#L3098-2 assume !(0 == initPersonOnFloor_~person#1); 438612#L3101-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 432640#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 441884#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 438437#L2901-5 assume { :end_inline_callOnFloor } true; 438326#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 438327#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 441368#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 438653#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 438654#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 434095#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 441359#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 437021#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 437023#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 438429#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 433052#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 433053#L1397 assume !(0 != timeShift_~tmp___9~2#1); 439327#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 436196#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 436197#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 437583#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 437584#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 439998#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 439999#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 435881#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 432600#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 432601#L1156 assume !(1 == ~currentHeading~0); 432642#L1166 assume !(0 == ~currentFloorID~0); 432643#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 437016#L1172-1 assume { :end_inline_continueInDirection } true; 440704#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 435072#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 435074#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 434294#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 434295#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 439585#L1770-2 [2022-12-13 11:23:45,091 INFO L750 eck$LassoCheckResult]: Loop: 439585#L1770-2 assume !false; 435656#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 435657#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 432564#L1779-2 assume !false; 438840#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 438842#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 439585#L1770-2 [2022-12-13 11:23:45,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:45,091 INFO L85 PathProgramCache]: Analyzing trace with hash 1905684660, now seen corresponding path program 1 times [2022-12-13 11:23:45,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:45,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [839297394] [2022-12-13 11:23:45,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:45,091 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:45,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:45,140 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:45,140 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:45,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [839297394] [2022-12-13 11:23:45,141 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [839297394] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:45,141 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:45,141 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 11:23:45,141 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1379208344] [2022-12-13 11:23:45,141 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:45,141 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:45,142 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:45,142 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 5 times [2022-12-13 11:23:45,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:45,142 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1367624157] [2022-12-13 11:23:45,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:45,142 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:45,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:45,171 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:45,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:45,173 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:45,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:45,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 11:23:45,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 11:23:45,188 INFO L87 Difference]: Start difference. First operand 9469 states and 17606 transitions. cyclomatic complexity: 8172 Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:45,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:45,561 INFO L93 Difference]: Finished difference Result 28188 states and 52461 transitions. [2022-12-13 11:23:45,561 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28188 states and 52461 transitions. [2022-12-13 11:23:45,653 INFO L131 ngComponentsAnalysis]: Automaton has 99 accepting balls. 7143 [2022-12-13 11:23:45,721 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28188 states to 28188 states and 52461 transitions. [2022-12-13 11:23:45,721 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28074 [2022-12-13 11:23:45,739 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28074 [2022-12-13 11:23:45,739 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28188 states and 52461 transitions. [2022-12-13 11:23:45,749 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:45,749 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28188 states and 52461 transitions. [2022-12-13 11:23:45,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28188 states and 52461 transitions. [2022-12-13 11:23:45,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28188 to 9477. [2022-12-13 11:23:45,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9477 states, 9477 states have (on average 1.8584995251661918) internal successors, (17613), 9476 states have internal predecessors, (17613), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:45,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9477 states to 9477 states and 17613 transitions. [2022-12-13 11:23:45,893 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9477 states and 17613 transitions. [2022-12-13 11:23:45,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 11:23:45,894 INFO L428 stractBuchiCegarLoop]: Abstraction has 9477 states and 17613 transitions. [2022-12-13 11:23:45,894 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-12-13 11:23:45,894 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9477 states and 17613 transitions. [2022-12-13 11:23:45,916 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:45,916 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:45,916 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:45,916 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:45,916 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:45,917 INFO L748 eck$LassoCheckResult]: Stem: 477605#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 477356#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 477357#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 479203#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 471700#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 471701#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 473387#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 473388#L1917 assume !(0 == getOrigin_~person#1); 473524#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 474948#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 474949#L3097 assume !(0 == initPersonOnFloor_~floor#1); 479410#L3124 assume !(1 == initPersonOnFloor_~floor#1); 471285#L3151 assume !(2 == initPersonOnFloor_~floor#1); 471286#L3178 assume 3 == initPersonOnFloor_~floor#1; 477609#L3179 assume !(0 == initPersonOnFloor_~person#1); 474103#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 471407#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 477510#L2889 assume !(0 == callOnFloor_~floorID#1); 473000#L2892 assume !(1 == callOnFloor_~floorID#1); 473001#L2895 assume !(2 == callOnFloor_~floorID#1); 477817#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 479346#L2901-2 assume { :end_inline_callOnFloor } true; 472338#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 472339#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 478865#L1917-1 assume !(0 == getOrigin_~person#1); 475282#L1921-1 assume !(1 == getOrigin_~person#1); 473342#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 470874#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 479542#L3097-1 assume 0 == initPersonOnFloor_~floor#1; 476419#L3098-2 assume !(0 == initPersonOnFloor_~person#1); 476280#L3101-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 470306#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 479553#L2889-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 476105#L2901-5 assume { :end_inline_callOnFloor } true; 475994#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 475995#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 479035#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 476321#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 476322#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 471764#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 479026#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 474688#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 474690#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 476097#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 470718#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 470719#L1397 assume !(0 != timeShift_~tmp___9~2#1); 476995#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 473862#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 473863#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 475250#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 475251#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 477666#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 477667#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 473547#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 470266#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 470267#L1156 assume !(1 == ~currentHeading~0); 470308#L1166 assume !(0 == ~currentFloorID~0); 470309#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 474683#L1172-1 assume { :end_inline_continueInDirection } true; 478372#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 472737#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 472739#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 471959#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 471960#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 477253#L1770-2 [2022-12-13 11:23:45,917 INFO L750 eck$LassoCheckResult]: Loop: 477253#L1770-2 assume !false; 473321#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 473322#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 470233#L1779-2 assume !false; 476508#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 476510#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 477253#L1770-2 [2022-12-13 11:23:45,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:45,917 INFO L85 PathProgramCache]: Analyzing trace with hash 812216559, now seen corresponding path program 1 times [2022-12-13 11:23:45,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:45,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1424569653] [2022-12-13 11:23:45,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:45,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:45,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:45,983 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:45,984 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:45,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1424569653] [2022-12-13 11:23:45,984 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1424569653] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:45,984 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:45,984 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 11:23:45,984 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1741456089] [2022-12-13 11:23:45,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:45,984 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:45,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:45,985 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 6 times [2022-12-13 11:23:45,985 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:45,985 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1729559339] [2022-12-13 11:23:45,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:45,985 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:45,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:45,987 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:45,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:45,989 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:46,004 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:46,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 11:23:46,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 11:23:46,005 INFO L87 Difference]: Start difference. First operand 9477 states and 17613 transitions. cyclomatic complexity: 8171 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:46,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:46,432 INFO L93 Difference]: Finished difference Result 20771 states and 38642 transitions. [2022-12-13 11:23:46,432 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20771 states and 38642 transitions. [2022-12-13 11:23:46,499 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8420 [2022-12-13 11:23:46,547 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20771 states to 20771 states and 38642 transitions. [2022-12-13 11:23:46,547 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20733 [2022-12-13 11:23:46,560 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20733 [2022-12-13 11:23:46,560 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20771 states and 38642 transitions. [2022-12-13 11:23:46,566 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:46,567 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20771 states and 38642 transitions. [2022-12-13 11:23:46,580 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20771 states and 38642 transitions. [2022-12-13 11:23:46,669 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20771 to 9463. [2022-12-13 11:23:46,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9463 states, 9463 states have (on average 1.858501532283631) internal successors, (17587), 9462 states have internal predecessors, (17587), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:46,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9463 states to 9463 states and 17587 transitions. [2022-12-13 11:23:46,704 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9463 states and 17587 transitions. [2022-12-13 11:23:46,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 11:23:46,705 INFO L428 stractBuchiCegarLoop]: Abstraction has 9463 states and 17587 transitions. [2022-12-13 11:23:46,705 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-12-13 11:23:46,705 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9463 states and 17587 transitions. [2022-12-13 11:23:46,732 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:46,732 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:46,732 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:46,733 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:46,733 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:46,734 INFO L748 eck$LassoCheckResult]: Stem: 507861#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 507612#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 507613#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 509456#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 501959#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 501960#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 503644#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 503645#L1917 assume !(0 == getOrigin_~person#1); 503779#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 505208#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 505209#L3097 assume !(0 == initPersonOnFloor_~floor#1); 509663#L3124 assume !(1 == initPersonOnFloor_~floor#1); 501544#L3151 assume !(2 == initPersonOnFloor_~floor#1); 501545#L3178 assume 3 == initPersonOnFloor_~floor#1; 507865#L3179 assume !(0 == initPersonOnFloor_~person#1); 504362#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 501666#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 507766#L2889 assume !(0 == callOnFloor_~floorID#1); 503259#L2892 assume !(1 == callOnFloor_~floorID#1); 503260#L2895 assume !(2 == callOnFloor_~floorID#1); 508073#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 509599#L2901-2 assume { :end_inline_callOnFloor } true; 502597#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 502598#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 509118#L1917-1 assume !(0 == getOrigin_~person#1); 505542#L1921-1 assume !(1 == getOrigin_~person#1); 503599#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 501287#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 501288#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 504125#L3124-1 assume 1 == initPersonOnFloor_~floor#1; 504126#L3125-2 assume !(0 == initPersonOnFloor_~person#1); 509060#L3128-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 504007#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 509804#L2889-2 assume !(0 == callOnFloor_~floorID#1); 509802#L2892-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 506365#L2901-5 assume { :end_inline_callOnFloor } true; 506254#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 506255#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 509288#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 506580#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 506581#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 502023#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 509279#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 504946#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 504948#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 506357#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 500979#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 500980#L1397 assume !(0 != timeShift_~tmp___9~2#1); 507251#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 504120#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 504121#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 505510#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 505511#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 507922#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 507923#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 503804#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 500530#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 500531#L1156 assume !(1 == ~currentHeading~0); 500569#L1166 assume !(0 == ~currentFloorID~0); 500570#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 504941#L1172-1 assume { :end_inline_continueInDirection } true; 508626#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 502996#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 502998#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 502218#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 502219#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 507509#L1770-2 [2022-12-13 11:23:46,734 INFO L750 eck$LassoCheckResult]: Loop: 507509#L1770-2 assume !false; 503578#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 503579#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 500494#L1779-2 assume !false; 506766#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 506768#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 507509#L1770-2 [2022-12-13 11:23:46,734 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:46,734 INFO L85 PathProgramCache]: Analyzing trace with hash -1877153083, now seen corresponding path program 1 times [2022-12-13 11:23:46,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:46,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [106643064] [2022-12-13 11:23:46,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:46,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:46,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:46,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:46,832 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:46,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [106643064] [2022-12-13 11:23:46,832 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [106643064] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:46,832 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:46,832 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 11:23:46,832 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [462744457] [2022-12-13 11:23:46,833 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:46,833 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:46,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:46,833 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 7 times [2022-12-13 11:23:46,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:46,833 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [210231585] [2022-12-13 11:23:46,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:46,834 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:46,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:46,836 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:46,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:46,839 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:46,852 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:46,853 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 11:23:46,853 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 11:23:46,853 INFO L87 Difference]: Start difference. First operand 9463 states and 17587 transitions. cyclomatic complexity: 8159 Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:47,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:47,259 INFO L93 Difference]: Finished difference Result 20745 states and 38593 transitions. [2022-12-13 11:23:47,259 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20745 states and 38593 transitions. [2022-12-13 11:23:47,315 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8420 [2022-12-13 11:23:47,356 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20745 states to 20745 states and 38593 transitions. [2022-12-13 11:23:47,356 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20707 [2022-12-13 11:23:47,366 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20707 [2022-12-13 11:23:47,367 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20745 states and 38593 transitions. [2022-12-13 11:23:47,371 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:47,371 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20745 states and 38593 transitions. [2022-12-13 11:23:47,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20745 states and 38593 transitions. [2022-12-13 11:23:47,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20745 to 9457. [2022-12-13 11:23:47,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9457 states, 9457 states have (on average 1.858306016707201) internal successors, (17574), 9456 states have internal predecessors, (17574), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:47,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9457 states to 9457 states and 17574 transitions. [2022-12-13 11:23:47,488 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9457 states and 17574 transitions. [2022-12-13 11:23:47,489 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 11:23:47,489 INFO L428 stractBuchiCegarLoop]: Abstraction has 9457 states and 17574 transitions. [2022-12-13 11:23:47,489 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-12-13 11:23:47,490 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9457 states and 17574 transitions. [2022-12-13 11:23:47,510 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:47,511 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:47,511 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:47,511 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:47,511 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:47,511 INFO L748 eck$LassoCheckResult]: Stem: 538081#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 537832#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 537833#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 539677#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 532183#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 532184#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 533868#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 533869#L1917 assume !(0 == getOrigin_~person#1); 534003#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 535428#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 535429#L3097 assume !(0 == initPersonOnFloor_~floor#1); 539884#L3124 assume !(1 == initPersonOnFloor_~floor#1); 531766#L3151 assume !(2 == initPersonOnFloor_~floor#1); 531767#L3178 assume 3 == initPersonOnFloor_~floor#1; 538085#L3179 assume !(0 == initPersonOnFloor_~person#1); 534582#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 531890#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 537986#L2889 assume !(0 == callOnFloor_~floorID#1); 533483#L2892 assume !(1 == callOnFloor_~floorID#1); 533484#L2895 assume !(2 == callOnFloor_~floorID#1); 538293#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 539820#L2901-2 assume { :end_inline_callOnFloor } true; 532821#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 532822#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 539339#L1917-1 assume !(0 == getOrigin_~person#1); 535762#L1921-1 assume !(1 == getOrigin_~person#1); 533823#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 531511#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 531512#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 534346#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 534347#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 534814#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 534815#L3155-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 535333#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 540024#L2889-2 assume !(0 == callOnFloor_~floorID#1); 540023#L2892-2 assume !(1 == callOnFloor_~floorID#1); 540022#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 536585#L2901-5 assume { :end_inline_callOnFloor } true; 536474#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 536475#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 539509#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 536800#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 536801#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 532244#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 539500#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 535166#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 535168#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 536577#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 531203#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 531204#L1397 assume !(0 != timeShift_~tmp___9~2#1); 537471#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 534341#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 534342#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 535730#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 535731#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 538142#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 538143#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 534028#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 530754#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 530755#L1156 assume !(1 == ~currentHeading~0); 530793#L1166 assume !(0 == ~currentFloorID~0); 530794#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 535161#L1172-1 assume { :end_inline_continueInDirection } true; 538849#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 533220#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 533222#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 532442#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 532443#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 537729#L1770-2 [2022-12-13 11:23:47,512 INFO L750 eck$LassoCheckResult]: Loop: 537729#L1770-2 assume !false; 533802#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 533803#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 530718#L1779-2 assume !false; 536986#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 536988#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 537729#L1770-2 [2022-12-13 11:23:47,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:47,512 INFO L85 PathProgramCache]: Analyzing trace with hash -2042376538, now seen corresponding path program 1 times [2022-12-13 11:23:47,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:47,512 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2131390709] [2022-12-13 11:23:47,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:47,512 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:47,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:47,561 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:47,561 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:47,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2131390709] [2022-12-13 11:23:47,562 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2131390709] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:47,562 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:47,562 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 11:23:47,562 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1194037237] [2022-12-13 11:23:47,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:47,562 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:47,562 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:47,563 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 8 times [2022-12-13 11:23:47,563 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:47,563 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1532527428] [2022-12-13 11:23:47,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:47,563 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:47,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:47,566 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:47,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:47,570 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:47,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:47,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 11:23:47,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 11:23:47,584 INFO L87 Difference]: Start difference. First operand 9457 states and 17574 transitions. cyclomatic complexity: 8152 Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:47,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:47,874 INFO L93 Difference]: Finished difference Result 13244 states and 24603 transitions. [2022-12-13 11:23:47,874 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13244 states and 24603 transitions. [2022-12-13 11:23:47,912 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4394 [2022-12-13 11:23:47,938 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13244 states to 13244 states and 24603 transitions. [2022-12-13 11:23:47,938 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13206 [2022-12-13 11:23:47,944 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13206 [2022-12-13 11:23:47,945 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13244 states and 24603 transitions. [2022-12-13 11:23:47,945 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:47,945 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13244 states and 24603 transitions. [2022-12-13 11:23:47,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13244 states and 24603 transitions. [2022-12-13 11:23:48,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13244 to 9457. [2022-12-13 11:23:48,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9457 states, 9457 states have (on average 1.8574600824785872) internal successors, (17566), 9456 states have internal predecessors, (17566), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:48,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9457 states to 9457 states and 17566 transitions. [2022-12-13 11:23:48,038 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9457 states and 17566 transitions. [2022-12-13 11:23:48,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 11:23:48,039 INFO L428 stractBuchiCegarLoop]: Abstraction has 9457 states and 17566 transitions. [2022-12-13 11:23:48,039 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-12-13 11:23:48,039 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9457 states and 17566 transitions. [2022-12-13 11:23:48,059 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:48,059 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:48,059 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:48,060 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:48,060 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:48,060 INFO L748 eck$LassoCheckResult]: Stem: 560790#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 560541#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 560542#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 562385#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 554894#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 554895#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 556579#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 556580#L1917 assume !(0 == getOrigin_~person#1); 556714#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 558137#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 558138#L3097 assume !(0 == initPersonOnFloor_~floor#1); 562592#L3124 assume !(1 == initPersonOnFloor_~floor#1); 554477#L3151 assume !(2 == initPersonOnFloor_~floor#1); 554478#L3178 assume 3 == initPersonOnFloor_~floor#1; 560794#L3179 assume !(0 == initPersonOnFloor_~person#1); 557292#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 554601#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 560695#L2889 assume !(0 == callOnFloor_~floorID#1); 556194#L2892 assume !(1 == callOnFloor_~floorID#1); 556195#L2895 assume !(2 == callOnFloor_~floorID#1); 561002#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 562528#L2901-2 assume { :end_inline_callOnFloor } true; 555532#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 555533#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 562048#L1917-1 assume !(0 == getOrigin_~person#1); 558471#L1921-1 assume !(1 == getOrigin_~person#1); 556534#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 554222#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 554223#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 557057#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 557058#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 557522#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 557523#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 560016#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 558042#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 562738#L2889-2 assume !(0 == callOnFloor_~floorID#1); 562737#L2892-2 assume !(1 == callOnFloor_~floorID#1); 562736#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 559293#L2901-5 assume { :end_inline_callOnFloor } true; 559182#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 559183#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 562217#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 559508#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 559509#L2826 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 554955#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 562208#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 557876#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 557878#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 559285#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 553914#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 553915#L1397 assume !(0 != timeShift_~tmp___9~2#1); 560179#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 557052#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 557053#L2826-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 558439#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 558440#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 560851#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 560852#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 556738#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 553465#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 553466#L1156 assume !(1 == ~currentHeading~0); 553504#L1166 assume !(0 == ~currentFloorID~0); 553505#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 557871#L1172-1 assume { :end_inline_continueInDirection } true; 561558#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 555931#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 555933#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 555153#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 555154#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 560438#L1770-2 [2022-12-13 11:23:48,060 INFO L750 eck$LassoCheckResult]: Loop: 560438#L1770-2 assume !false; 556513#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 556514#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 553429#L1779-2 assume !false; 559694#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 559696#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 560438#L1770-2 [2022-12-13 11:23:48,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:48,061 INFO L85 PathProgramCache]: Analyzing trace with hash 413234797, now seen corresponding path program 1 times [2022-12-13 11:23:48,061 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:48,061 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1257979685] [2022-12-13 11:23:48,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:48,061 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:48,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:48,106 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:48,106 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:48,106 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1257979685] [2022-12-13 11:23:48,106 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1257979685] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:48,107 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:48,107 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 11:23:48,107 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1689682120] [2022-12-13 11:23:48,107 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:48,107 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:48,107 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:48,107 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 9 times [2022-12-13 11:23:48,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:48,108 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1486517228] [2022-12-13 11:23:48,108 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:48,108 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:48,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:48,111 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:48,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:48,114 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:48,128 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:48,129 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 11:23:48,129 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 11:23:48,129 INFO L87 Difference]: Start difference. First operand 9457 states and 17566 transitions. cyclomatic complexity: 8144 Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:50,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:50,671 INFO L93 Difference]: Finished difference Result 16605 states and 30346 transitions. [2022-12-13 11:23:50,671 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16605 states and 30346 transitions. [2022-12-13 11:23:50,719 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4292 [2022-12-13 11:23:50,753 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16605 states to 16605 states and 30346 transitions. [2022-12-13 11:23:50,753 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16529 [2022-12-13 11:23:50,763 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16529 [2022-12-13 11:23:50,763 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16605 states and 30346 transitions. [2022-12-13 11:23:50,763 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:50,764 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16605 states and 30346 transitions. [2022-12-13 11:23:50,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16605 states and 30346 transitions. [2022-12-13 11:23:50,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16605 to 9457. [2022-12-13 11:23:50,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9457 states, 9457 states have (on average 1.8172782066194353) internal successors, (17186), 9456 states have internal predecessors, (17186), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:50,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9457 states to 9457 states and 17186 transitions. [2022-12-13 11:23:50,872 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9457 states and 17186 transitions. [2022-12-13 11:23:50,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 11:23:50,872 INFO L428 stractBuchiCegarLoop]: Abstraction has 9457 states and 17186 transitions. [2022-12-13 11:23:50,873 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-12-13 11:23:50,873 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9457 states and 17186 transitions. [2022-12-13 11:23:50,893 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2381 [2022-12-13 11:23:50,893 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:50,894 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:50,894 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:50,894 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:50,894 INFO L748 eck$LassoCheckResult]: Stem: 586846#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 586595#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 586596#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 588452#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 580951#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 580952#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 582622#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 582623#L1917 assume !(0 == getOrigin_~person#1); 582757#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 584180#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 584181#L3097 assume !(0 == initPersonOnFloor_~floor#1); 588662#L3124 assume !(1 == initPersonOnFloor_~floor#1); 580537#L3151 assume !(2 == initPersonOnFloor_~floor#1); 580538#L3178 assume 3 == initPersonOnFloor_~floor#1; 586850#L3179 assume !(0 == initPersonOnFloor_~person#1); 583336#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 580660#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 586749#L2889 assume !(0 == callOnFloor_~floorID#1); 582238#L2892 assume !(1 == callOnFloor_~floorID#1); 582239#L2895 assume !(2 == callOnFloor_~floorID#1); 587060#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 588598#L2901-2 assume { :end_inline_callOnFloor } true; 581582#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 581583#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 588112#L1917-1 assume !(0 == getOrigin_~person#1); 584514#L1921-1 assume !(1 == getOrigin_~person#1); 582577#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 580284#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 580285#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 583100#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 583101#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 583567#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 583568#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 586068#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 584085#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 588793#L2889-2 assume !(0 == callOnFloor_~floorID#1); 588792#L2892-2 assume !(1 == callOnFloor_~floorID#1); 588791#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 585339#L2901-5 assume { :end_inline_callOnFloor } true; 585228#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 585229#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 588283#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 585559#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 585560#L2826 assume !(0 == isFloorCalling_~floorID#1); 584543#L2830 assume !(1 == isFloorCalling_~floorID#1); 584544#L2834 assume !(2 == isFloorCalling_~floorID#1); 588671#L2838 assume !(3 == isFloorCalling_~floorID#1); 581011#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 581012#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 588274#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 583920#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 583922#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 585331#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 579978#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 579979#L1397 assume !(0 != timeShift_~tmp___9~2#1); 586233#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 583095#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 583096#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 587313#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 585038#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 585039#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 588225#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 584482#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 584483#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 586907#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 586908#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 582782#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 579535#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 579536#L1156 assume !(1 == ~currentHeading~0); 579574#L1166 assume !(0 == ~currentFloorID~0); 579575#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 583915#L1172-1 assume { :end_inline_continueInDirection } true; 587618#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 581977#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 581979#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 581206#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 581207#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 586492#L1770-2 [2022-12-13 11:23:50,894 INFO L750 eck$LassoCheckResult]: Loop: 586492#L1770-2 assume !false; 582556#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 582557#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 579500#L1779-2 assume !false; 585745#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 585747#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 586492#L1770-2 [2022-12-13 11:23:50,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:50,895 INFO L85 PathProgramCache]: Analyzing trace with hash 1062454361, now seen corresponding path program 1 times [2022-12-13 11:23:50,895 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:50,895 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1686137848] [2022-12-13 11:23:50,895 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:50,895 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:50,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:50,962 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:50,962 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:50,962 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1686137848] [2022-12-13 11:23:50,962 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1686137848] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:50,963 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:50,963 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 11:23:50,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1987916868] [2022-12-13 11:23:50,963 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:50,963 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:50,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:50,963 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 10 times [2022-12-13 11:23:50,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:50,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1648019062] [2022-12-13 11:23:50,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:50,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:50,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:50,967 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:50,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:50,971 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:50,988 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:50,989 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 11:23:50,989 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 11:23:50,989 INFO L87 Difference]: Start difference. First operand 9457 states and 17186 transitions. cyclomatic complexity: 7764 Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 5 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:58,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:23:58,617 INFO L93 Difference]: Finished difference Result 64671 states and 118519 transitions. [2022-12-13 11:23:58,617 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64671 states and 118519 transitions. [2022-12-13 11:23:58,928 INFO L131 ngComponentsAnalysis]: Automaton has 354 accepting balls. 15191 [2022-12-13 11:23:59,175 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64671 states to 64671 states and 118519 transitions. [2022-12-13 11:23:59,175 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 64291 [2022-12-13 11:23:59,230 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 64291 [2022-12-13 11:23:59,230 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64671 states and 118519 transitions. [2022-12-13 11:23:59,231 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:23:59,232 INFO L218 hiAutomatonCegarLoop]: Abstraction has 64671 states and 118519 transitions. [2022-12-13 11:23:59,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64671 states and 118519 transitions. [2022-12-13 11:23:59,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64671 to 18758. [2022-12-13 11:23:59,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18758 states, 18758 states have (on average 1.8183708284465294) internal successors, (34109), 18757 states have internal predecessors, (34109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:23:59,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18758 states to 18758 states and 34109 transitions. [2022-12-13 11:23:59,633 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18758 states and 34109 transitions. [2022-12-13 11:23:59,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-13 11:23:59,634 INFO L428 stractBuchiCegarLoop]: Abstraction has 18758 states and 34109 transitions. [2022-12-13 11:23:59,634 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-12-13 11:23:59,634 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18758 states and 34109 transitions. [2022-12-13 11:23:59,689 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4736 [2022-12-13 11:23:59,689 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:23:59,689 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:23:59,690 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:23:59,690 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:23:59,690 INFO L748 eck$LassoCheckResult]: Stem: 661313#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 661035#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 661036#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 663278#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 655116#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 655117#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 656814#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 656815#L1917 assume !(0 == getOrigin_~person#1); 656950#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 658425#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 658426#L3097 assume !(0 == initPersonOnFloor_~floor#1); 663572#L3124 assume !(1 == initPersonOnFloor_~floor#1); 654698#L3151 assume !(2 == initPersonOnFloor_~floor#1); 654699#L3178 assume 3 == initPersonOnFloor_~floor#1; 661318#L3179 assume !(0 == initPersonOnFloor_~person#1); 657548#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 654821#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 661207#L2889 assume !(0 == callOnFloor_~floorID#1); 656421#L2892 assume !(1 == callOnFloor_~floorID#1); 656422#L2895 assume !(2 == callOnFloor_~floorID#1); 661553#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 663474#L2901-2 assume { :end_inline_callOnFloor } true; 655755#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 655756#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 662803#L1917-1 assume !(0 == getOrigin_~person#1); 658774#L1921-1 assume !(1 == getOrigin_~person#1); 656768#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 654444#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 654445#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 657304#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 657305#L3151-1 assume !(2 == initPersonOnFloor_~floor#1); 663969#L3178-1 assume !(3 == initPersonOnFloor_~floor#1); 663964#L3205-2 assume !(4 == initPersonOnFloor_~floor#1); 663956#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 663951#L2889-2 assume !(0 == callOnFloor_~floorID#1); 663949#L2892-2 assume !(1 == callOnFloor_~floorID#1); 663947#L2895-2 assume !(2 == callOnFloor_~floorID#1); 663945#L2898-2 assume !(3 == callOnFloor_~floorID#1); 663943#L2901-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 659657#L2901-5 assume { :end_inline_callOnFloor } true; 659537#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 659538#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 663044#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 659896#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 659897#L2826 assume !(0 == isFloorCalling_~floorID#1); 658805#L2830 assume !(1 == isFloorCalling_~floorID#1); 658806#L2834 assume !(2 == isFloorCalling_~floorID#1); 663921#L2838 assume !(3 == isFloorCalling_~floorID#1); 663919#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 663918#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 663917#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 663916#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 659648#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 659649#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 654136#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 654137#L1397 assume !(0 != timeShift_~tmp___9~2#1); 660635#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 657299#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 657300#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 661860#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 659333#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 659334#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 662954#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 658740#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 658741#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 661378#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 661379#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 664277#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 664268#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 664267#L1156 assume !(1 == ~currentHeading~0); 664264#L1166 assume !(0 == ~currentFloorID~0); 664263#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 664262#L1172-1 assume { :end_inline_continueInDirection } true; 664252#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 663998#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 663999#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 664206#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 664407#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 664406#L1770-2 [2022-12-13 11:23:59,691 INFO L750 eck$LassoCheckResult]: Loop: 664406#L1770-2 assume !false; 664405#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 664404#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 664403#L1779-2 assume !false; 664401#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 664402#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 664406#L1770-2 [2022-12-13 11:23:59,691 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:59,691 INFO L85 PathProgramCache]: Analyzing trace with hash -1885271029, now seen corresponding path program 1 times [2022-12-13 11:23:59,691 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:59,691 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [237176672] [2022-12-13 11:23:59,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:59,691 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:59,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:23:59,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:23:59,762 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:23:59,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [237176672] [2022-12-13 11:23:59,762 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [237176672] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:23:59,762 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:23:59,763 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 11:23:59,763 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1397341] [2022-12-13 11:23:59,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:23:59,763 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:23:59,763 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:23:59,763 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 11 times [2022-12-13 11:23:59,763 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:23:59,764 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [735025594] [2022-12-13 11:23:59,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:23:59,764 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:23:59,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:59,767 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:23:59,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:23:59,771 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:23:59,785 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:23:59,785 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 11:23:59,785 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 11:23:59,785 INFO L87 Difference]: Start difference. First operand 18758 states and 34109 transitions. cyclomatic complexity: 15421 Second operand has 4 states, 4 states have (on average 19.5) internal successors, (78), 4 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:00,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:00,128 INFO L93 Difference]: Finished difference Result 33614 states and 61171 transitions. [2022-12-13 11:24:00,128 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33614 states and 61171 transitions. [2022-12-13 11:24:00,223 INFO L131 ngComponentsAnalysis]: Automaton has 102 accepting balls. 12736 [2022-12-13 11:24:00,289 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33614 states to 33614 states and 61171 transitions. [2022-12-13 11:24:00,289 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33538 [2022-12-13 11:24:00,305 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33538 [2022-12-13 11:24:00,305 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33614 states and 61171 transitions. [2022-12-13 11:24:00,306 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:00,306 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33614 states and 61171 transitions. [2022-12-13 11:24:00,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33614 states and 61171 transitions. [2022-12-13 11:24:00,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33614 to 18730. [2022-12-13 11:24:00,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18730 states, 18730 states have (on average 1.8184196476241323) internal successors, (34059), 18729 states have internal predecessors, (34059), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:00,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18730 states to 18730 states and 34059 transitions. [2022-12-13 11:24:00,503 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18730 states and 34059 transitions. [2022-12-13 11:24:00,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 11:24:00,505 INFO L428 stractBuchiCegarLoop]: Abstraction has 18730 states and 34059 transitions. [2022-12-13 11:24:00,505 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-12-13 11:24:00,505 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18730 states and 34059 transitions. [2022-12-13 11:24:00,560 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4736 [2022-12-13 11:24:00,560 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:24:00,561 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:24:00,561 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:24:00,561 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:24:00,562 INFO L748 eck$LassoCheckResult]: Stem: 713607#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 713333#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 713334#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 715478#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 707486#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 707487#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 709187#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 709188#L1917 assume !(0 == getOrigin_~person#1); 709324#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 710786#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 710787#L3097 assume !(0 == initPersonOnFloor_~floor#1); 715760#L3124 assume !(1 == initPersonOnFloor_~floor#1); 707068#L3151 assume !(2 == initPersonOnFloor_~floor#1); 707069#L3178 assume 3 == initPersonOnFloor_~floor#1; 713611#L3179 assume !(0 == initPersonOnFloor_~person#1); 709920#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 707193#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 713503#L2889 assume !(0 == callOnFloor_~floorID#1); 708792#L2892 assume !(1 == callOnFloor_~floorID#1); 708793#L2895 assume !(2 == callOnFloor_~floorID#1); 713831#L2898 assume !(3 == callOnFloor_~floorID#1); 715667#L2901 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 715874#L2901-2 assume { :end_inline_callOnFloor } true; 716445#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 716442#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 716440#L1917-1 assume !(0 == getOrigin_~person#1); 716439#L1921-1 assume !(1 == getOrigin_~person#1); 716436#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 716435#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 716433#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 716430#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 716428#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 716427#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 716425#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 716423#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 716418#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 716416#L2889-2 assume !(0 == callOnFloor_~floorID#1); 716414#L2892-2 assume !(1 == callOnFloor_~floorID#1); 716410#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 711993#L2901-5 assume { :end_inline_callOnFloor } true; 716408#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 716407#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 716406#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 716405#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 716404#L2826 assume !(0 == isFloorCalling_~floorID#1); 716403#L2830 assume !(1 == isFloorCalling_~floorID#1); 716402#L2834 assume !(2 == isFloorCalling_~floorID#1); 716401#L2838 assume !(3 == isFloorCalling_~floorID#1); 716400#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 716399#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 716398#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 716397#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 711984#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 711985#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 709605#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 716363#L1397 assume !(0 != timeShift_~tmp___9~2#1); 716360#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 716357#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 716355#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 716351#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 716350#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 716349#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 716348#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 716346#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 716301#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 716296#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 716217#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 716210#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 716209#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 716208#L1156 assume !(1 == ~currentHeading~0); 716205#L1166 assume !(0 == ~currentFloorID~0); 716204#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 716099#L1172-1 assume { :end_inline_continueInDirection } true; 716051#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 716040#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 716041#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 716050#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 716155#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 716154#L1770-2 [2022-12-13 11:24:00,562 INFO L750 eck$LassoCheckResult]: Loop: 716154#L1770-2 assume !false; 716153#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 716151#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 716150#L1779-2 assume !false; 716148#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 716149#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 716154#L1770-2 [2022-12-13 11:24:00,562 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:00,562 INFO L85 PathProgramCache]: Analyzing trace with hash -2107871655, now seen corresponding path program 1 times [2022-12-13 11:24:00,562 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:00,562 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [421320418] [2022-12-13 11:24:00,562 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:00,563 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:00,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:24:00,633 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:24:00,633 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:24:00,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [421320418] [2022-12-13 11:24:00,634 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [421320418] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:24:00,634 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:24:00,634 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 11:24:00,634 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1809623896] [2022-12-13 11:24:00,634 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:24:00,634 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:24:00,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:00,635 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 12 times [2022-12-13 11:24:00,635 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:00,635 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782207965] [2022-12-13 11:24:00,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:00,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:00,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:00,638 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:24:00,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:00,640 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:24:00,654 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:24:00,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 11:24:00,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 11:24:00,655 INFO L87 Difference]: Start difference. First operand 18730 states and 34059 transitions. cyclomatic complexity: 15399 Second operand has 5 states, 5 states have (on average 15.6) internal successors, (78), 5 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:01,315 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:01,315 INFO L93 Difference]: Finished difference Result 46597 states and 84811 transitions. [2022-12-13 11:24:01,315 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46597 states and 84811 transitions. [2022-12-13 11:24:01,463 INFO L131 ngComponentsAnalysis]: Automaton has 144 accepting balls. 17104 [2022-12-13 11:24:01,568 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46597 states to 46597 states and 84811 transitions. [2022-12-13 11:24:01,568 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46483 [2022-12-13 11:24:01,598 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46483 [2022-12-13 11:24:01,598 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46597 states and 84811 transitions. [2022-12-13 11:24:01,599 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:01,599 INFO L218 hiAutomatonCegarLoop]: Abstraction has 46597 states and 84811 transitions. [2022-12-13 11:24:01,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46597 states and 84811 transitions. [2022-12-13 11:24:01,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46597 to 18717. [2022-12-13 11:24:01,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18717 states, 18717 states have (on average 1.8185072394080248) internal successors, (34037), 18716 states have internal predecessors, (34037), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:01,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18717 states to 18717 states and 34037 transitions. [2022-12-13 11:24:01,858 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18717 states and 34037 transitions. [2022-12-13 11:24:01,859 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 11:24:01,859 INFO L428 stractBuchiCegarLoop]: Abstraction has 18717 states and 34037 transitions. [2022-12-13 11:24:01,859 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-12-13 11:24:01,859 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18717 states and 34037 transitions. [2022-12-13 11:24:01,902 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4736 [2022-12-13 11:24:01,902 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:24:01,903 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:24:01,903 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:24:01,903 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:24:01,903 INFO L748 eck$LassoCheckResult]: Stem: 778730#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 778479#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 778480#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 780355#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 772825#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 772826#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 774498#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 774499#L1917 assume !(0 == getOrigin_~person#1); 774634#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 776061#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 776062#L3097 assume !(0 == initPersonOnFloor_~floor#1); 780576#L3124 assume !(1 == initPersonOnFloor_~floor#1); 772411#L3151 assume !(2 == initPersonOnFloor_~floor#1); 772412#L3178 assume 3 == initPersonOnFloor_~floor#1; 778734#L3179 assume !(0 == initPersonOnFloor_~person#1); 775216#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 772534#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 778634#L2889 assume !(0 == callOnFloor_~floorID#1); 774114#L2892 assume !(1 == callOnFloor_~floorID#1); 774115#L2895 assume !(2 == callOnFloor_~floorID#1); 778945#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 780508#L2901-2 assume { :end_inline_callOnFloor } true; 773456#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 773457#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 780011#L1917-1 assume !(0 == getOrigin_~person#1); 776395#L1921-1 assume !(1 == getOrigin_~person#1); 774453#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 772162#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 772163#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 774979#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 774980#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 775447#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 775448#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 777955#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 775602#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 775603#L2889-2 assume !(0 == callOnFloor_~floorID#1); 776313#L2892-2 assume !(1 == callOnFloor_~floorID#1); 777785#L2895-2 assume !(2 == callOnFloor_~floorID#1); 778048#L2898-2 assume !(3 == callOnFloor_~floorID#1); 777222#L2901-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 777223#L2901-5 assume { :end_inline_callOnFloor } true; 782429#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 782422#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 782420#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 782419#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 782418#L2826 assume !(0 == isFloorCalling_~floorID#1); 782417#L2830 assume !(1 == isFloorCalling_~floorID#1); 782415#L2834 assume !(2 == isFloorCalling_~floorID#1); 782413#L2838 assume !(3 == isFloorCalling_~floorID#1); 782411#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 782408#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 782398#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 782394#L1244 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 777214#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1; 777215#L1248 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~14#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 774910#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 781143#L1397 assume !(0 != timeShift_~tmp___9~2#1); 781098#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 781097#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 781096#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 781094#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 781092#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 781090#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 781088#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 781086#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 780934#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 780921#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 780913#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 780904#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 780889#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 780888#L1156 assume !(1 == ~currentHeading~0); 780885#L1166 assume !(0 == ~currentFloorID~0); 780884#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 780796#L1172-1 assume { :end_inline_continueInDirection } true; 780748#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 780737#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 780738#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 780747#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 780851#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 780852#L1770-2 [2022-12-13 11:24:01,904 INFO L750 eck$LassoCheckResult]: Loop: 780852#L1770-2 assume !false; 780849#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 780850#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 780856#L1779-2 assume !false; 780855#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 780854#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 780852#L1770-2 [2022-12-13 11:24:01,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:01,904 INFO L85 PathProgramCache]: Analyzing trace with hash 1747701716, now seen corresponding path program 1 times [2022-12-13 11:24:01,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:01,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1139412903] [2022-12-13 11:24:01,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:01,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:01,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:24:01,961 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:24:01,961 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:24:01,961 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1139412903] [2022-12-13 11:24:01,961 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1139412903] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:24:01,961 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:24:01,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 11:24:01,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1285122373] [2022-12-13 11:24:01,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:24:01,962 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:24:01,962 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:01,962 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 13 times [2022-12-13 11:24:01,962 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:01,962 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [467295798] [2022-12-13 11:24:01,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:01,962 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:01,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:01,965 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:24:01,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:01,967 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:24:01,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:24:01,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 11:24:01,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 11:24:01,981 INFO L87 Difference]: Start difference. First operand 18717 states and 34037 transitions. cyclomatic complexity: 15390 Second operand has 5 states, 5 states have (on average 15.8) internal successors, (79), 5 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:02,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:02,280 INFO L93 Difference]: Finished difference Result 20441 states and 37194 transitions. [2022-12-13 11:24:02,280 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20441 states and 37194 transitions. [2022-12-13 11:24:02,357 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8342 [2022-12-13 11:24:02,408 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20441 states to 20441 states and 37194 transitions. [2022-12-13 11:24:02,409 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20403 [2022-12-13 11:24:02,422 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20403 [2022-12-13 11:24:02,422 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20441 states and 37194 transitions. [2022-12-13 11:24:02,422 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:02,422 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20441 states and 37194 transitions. [2022-12-13 11:24:02,435 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20441 states and 37194 transitions. [2022-12-13 11:24:02,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20441 to 13055. [2022-12-13 11:24:02,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13055 states, 13055 states have (on average 1.8183837610111069) internal successors, (23739), 13054 states have internal predecessors, (23739), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:02,562 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13055 states to 13055 states and 23739 transitions. [2022-12-13 11:24:02,562 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13055 states and 23739 transitions. [2022-12-13 11:24:02,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 11:24:02,563 INFO L428 stractBuchiCegarLoop]: Abstraction has 13055 states and 23739 transitions. [2022-12-13 11:24:02,563 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-12-13 11:24:02,563 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13055 states and 23739 transitions. [2022-12-13 11:24:02,593 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4368 [2022-12-13 11:24:02,593 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:24:02,593 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:24:02,594 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:24:02,594 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:24:02,594 INFO L748 eck$LassoCheckResult]: Stem: 817820#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 817570#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 817571#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 819416#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 811980#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 811981#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 813631#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 813632#L1917 assume !(0 == getOrigin_~person#1); 813765#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 815173#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 815174#L3097 assume !(0 == initPersonOnFloor_~floor#1); 819622#L3124 assume !(1 == initPersonOnFloor_~floor#1); 811574#L3151 assume !(2 == initPersonOnFloor_~floor#1); 811575#L3178 assume 3 == initPersonOnFloor_~floor#1; 817824#L3179 assume !(0 == initPersonOnFloor_~person#1); 814339#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 811697#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 817724#L2889 assume !(0 == callOnFloor_~floorID#1); 813251#L2892 assume !(1 == callOnFloor_~floorID#1); 813252#L2895 assume !(2 == callOnFloor_~floorID#1); 818034#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 819559#L2901-2 assume { :end_inline_callOnFloor } true; 812600#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 812601#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 819079#L1917-1 assume !(0 == getOrigin_~person#1); 815505#L1921-1 assume !(1 == getOrigin_~person#1); 813589#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 811325#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 811326#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 814107#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 814108#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 814570#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 814571#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 817046#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 814722#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 814723#L2889-2 assume !(0 == callOnFloor_~floorID#1); 815424#L2892-2 assume !(1 == callOnFloor_~floorID#1); 816877#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 817049#L2901-5 assume { :end_inline_callOnFloor } true; 816217#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 816218#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 819249#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 816543#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 816544#L2826 assume !(0 == isFloorCalling_~floorID#1); 815534#L2830 assume !(1 == isFloorCalling_~floorID#1); 815535#L2834 assume !(2 == isFloorCalling_~floorID#1); 819631#L2838 assume !(3 == isFloorCalling_~floorID#1); 812040#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 812041#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 819240#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 814917#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 814918#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 817391#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 817392#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 812801#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 813230#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 811026#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 811027#L1397 assume !(0 != timeShift_~tmp___9~2#1); 817211#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 814102#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 814103#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 818287#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 816026#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 816027#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 819192#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 815473#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 815474#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 817881#L1099 assume 0 != stopRequestedInDirection_~tmp___0~5#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 817882#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret41#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~9#1 := stopRequestedInDirection_#t~ret41#1;havoc stopRequestedInDirection_#t~ret41#1;stopRequestedInDirection_~__cil_tmp7~1#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~2#1 := (if stopRequestedInDirection_~tmp~9#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~10#1 := (if stopRequestedInDirection_~__cil_tmp8~2#1 == stopRequestedInDirection_~__cil_tmp7~1#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 813790#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 810583#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 810584#L1156 assume !(1 == ~currentHeading~0); 810622#L1166 assume !(0 == ~currentFloorID~0); 810623#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 814912#L1172-1 assume { :end_inline_continueInDirection } true; 818591#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 812991#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 812993#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 812230#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 812231#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 817467#L1770-2 [2022-12-13 11:24:02,594 INFO L750 eck$LassoCheckResult]: Loop: 817467#L1770-2 assume !false; 813568#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 813569#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 810548#L1779-2 assume !false; 816725#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 816727#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 817467#L1770-2 [2022-12-13 11:24:02,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:02,595 INFO L85 PathProgramCache]: Analyzing trace with hash 999937445, now seen corresponding path program 1 times [2022-12-13 11:24:02,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:02,595 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1744037025] [2022-12-13 11:24:02,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:02,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:02,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:24:02,655 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:24:02,655 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:24:02,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1744037025] [2022-12-13 11:24:02,655 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1744037025] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:24:02,655 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:24:02,655 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 11:24:02,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1418061379] [2022-12-13 11:24:02,655 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:24:02,656 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:24:02,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:02,656 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 14 times [2022-12-13 11:24:02,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:02,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [558582164] [2022-12-13 11:24:02,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:02,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:02,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:02,658 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:24:02,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:02,660 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:24:02,674 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:24:02,675 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 11:24:02,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 11:24:02,675 INFO L87 Difference]: Start difference. First operand 13055 states and 23739 transitions. cyclomatic complexity: 10728 Second operand has 6 states, 6 states have (on average 13.333333333333334) internal successors, (80), 5 states have internal predecessors, (80), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:06,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:06,248 INFO L93 Difference]: Finished difference Result 41849 states and 76695 transitions. [2022-12-13 11:24:06,248 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41849 states and 76695 transitions. [2022-12-13 11:24:06,389 INFO L131 ngComponentsAnalysis]: Automaton has 227 accepting balls. 14166 [2022-12-13 11:24:06,491 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41849 states to 41849 states and 76695 transitions. [2022-12-13 11:24:06,492 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 41697 [2022-12-13 11:24:06,518 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 41697 [2022-12-13 11:24:06,519 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41849 states and 76695 transitions. [2022-12-13 11:24:06,529 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:06,529 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41849 states and 76695 transitions. [2022-12-13 11:24:06,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41849 states and 76695 transitions. [2022-12-13 11:24:06,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41849 to 13045. [2022-12-13 11:24:06,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13045 states, 13045 states have (on average 1.8182445381372174) internal successors, (23719), 13044 states have internal predecessors, (23719), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:06,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13045 states to 13045 states and 23719 transitions. [2022-12-13 11:24:06,834 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13045 states and 23719 transitions. [2022-12-13 11:24:06,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-13 11:24:06,835 INFO L428 stractBuchiCegarLoop]: Abstraction has 13045 states and 23719 transitions. [2022-12-13 11:24:06,836 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-12-13 11:24:06,836 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13045 states and 23719 transitions. [2022-12-13 11:24:06,873 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4366 [2022-12-13 11:24:06,873 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:24:06,873 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:24:06,874 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:24:06,874 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:24:06,875 INFO L748 eck$LassoCheckResult]: Stem: 872937#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 872677#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 872678#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 874737#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 866917#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 866918#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 868583#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 868584#L1917 assume !(0 == getOrigin_~person#1); 868715#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 870160#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 870161#L3097 assume !(0 == initPersonOnFloor_~floor#1); 875008#L3124 assume !(1 == initPersonOnFloor_~floor#1); 866512#L3151 assume !(2 == initPersonOnFloor_~floor#1); 866513#L3178 assume 3 == initPersonOnFloor_~floor#1; 872941#L3179 assume !(0 == initPersonOnFloor_~person#1); 869302#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 866633#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 872838#L2889 assume !(0 == callOnFloor_~floorID#1); 868196#L2892 assume !(1 == callOnFloor_~floorID#1); 868197#L2895 assume !(2 == callOnFloor_~floorID#1); 873167#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 874908#L2901-2 assume { :end_inline_callOnFloor } true; 867543#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 867544#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 874330#L1917-1 assume !(0 == getOrigin_~person#1); 870503#L1921-1 assume !(1 == getOrigin_~person#1); 868541#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 866260#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 866261#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 869065#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 869066#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 869538#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 869539#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 872118#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 869692#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 869693#L2889-2 assume !(0 == callOnFloor_~floorID#1); 870417#L2892-2 assume !(1 == callOnFloor_~floorID#1); 871938#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 872121#L2901-5 assume { :end_inline_callOnFloor } true; 871242#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 871243#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 874540#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 871587#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 871588#L2826 assume !(0 == isFloorCalling_~floorID#1); 870533#L2830 assume !(1 == isFloorCalling_~floorID#1); 870534#L2834 assume !(2 == isFloorCalling_~floorID#1); 875026#L2838 assume !(3 == isFloorCalling_~floorID#1); 866977#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 866978#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 874529#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 869894#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 869895#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 872480#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 872481#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 867745#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 868175#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 865961#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 865962#L1397 assume !(0 != timeShift_~tmp___9~2#1); 872292#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 869060#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 869061#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 873444#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 871042#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 871043#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 874464#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 870467#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 870468#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 873001#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 873002#L1121 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~11#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 868515#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 873311#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 873312#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 874008#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 866195#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 867343#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 868741#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 865518#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 865519#L1156 assume !(1 == ~currentHeading~0); 865557#L1166 assume !(0 == ~currentFloorID~0); 865558#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 869889#L1172-1 assume { :end_inline_continueInDirection } true; 873777#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 867936#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 867938#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 867169#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 867170#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 872564#L1770-2 [2022-12-13 11:24:06,875 INFO L750 eck$LassoCheckResult]: Loop: 872564#L1770-2 assume !false; 868520#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 868521#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 865486#L1779-2 assume !false; 871776#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 871778#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 872564#L1770-2 [2022-12-13 11:24:06,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:06,875 INFO L85 PathProgramCache]: Analyzing trace with hash 725878327, now seen corresponding path program 1 times [2022-12-13 11:24:06,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:06,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1791126503] [2022-12-13 11:24:06,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:06,876 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:06,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:24:06,923 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:24:06,923 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:24:06,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1791126503] [2022-12-13 11:24:06,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1791126503] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:24:06,923 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:24:06,923 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 11:24:06,923 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1934931667] [2022-12-13 11:24:06,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:24:06,924 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:24:06,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:06,924 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 15 times [2022-12-13 11:24:06,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:06,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1168876290] [2022-12-13 11:24:06,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:06,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:06,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:06,927 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:24:06,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:06,930 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:24:06,942 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:24:06,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 11:24:06,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 11:24:06,942 INFO L87 Difference]: Start difference. First operand 13045 states and 23719 transitions. cyclomatic complexity: 10718 Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 2 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:07,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:07,351 INFO L93 Difference]: Finished difference Result 24840 states and 45050 transitions. [2022-12-13 11:24:07,351 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24840 states and 45050 transitions. [2022-12-13 11:24:07,433 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 8610 [2022-12-13 11:24:07,491 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24840 states to 24840 states and 45050 transitions. [2022-12-13 11:24:07,492 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24766 [2022-12-13 11:24:07,506 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24766 [2022-12-13 11:24:07,506 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24840 states and 45050 transitions. [2022-12-13 11:24:07,507 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:07,507 INFO L218 hiAutomatonCegarLoop]: Abstraction has 24840 states and 45050 transitions. [2022-12-13 11:24:07,528 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24840 states and 45050 transitions. [2022-12-13 11:24:07,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24840 to 24838. [2022-12-13 11:24:07,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24838 states, 24838 states have (on average 1.8136725984378774) internal successors, (45048), 24837 states have internal predecessors, (45048), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:07,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24838 states to 24838 states and 45048 transitions. [2022-12-13 11:24:07,809 INFO L240 hiAutomatonCegarLoop]: Abstraction has 24838 states and 45048 transitions. [2022-12-13 11:24:07,810 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 11:24:07,810 INFO L428 stractBuchiCegarLoop]: Abstraction has 24838 states and 45048 transitions. [2022-12-13 11:24:07,810 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-12-13 11:24:07,810 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24838 states and 45048 transitions. [2022-12-13 11:24:07,870 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 8610 [2022-12-13 11:24:07,870 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:24:07,871 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:24:07,871 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:24:07,871 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:24:07,871 INFO L748 eck$LassoCheckResult]: Stem: 910871#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 910597#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 910598#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 912679#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 904808#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 904809#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 906487#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 906488#L1917 assume !(0 == getOrigin_~person#1); 906621#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 908071#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 908072#L3097 assume !(0 == initPersonOnFloor_~floor#1); 912960#L3124 assume !(1 == initPersonOnFloor_~floor#1); 904399#L3151 assume !(2 == initPersonOnFloor_~floor#1); 904400#L3178 assume 3 == initPersonOnFloor_~floor#1; 910875#L3179 assume !(0 == initPersonOnFloor_~person#1); 907208#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 904522#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 910764#L2889 assume !(0 == callOnFloor_~floorID#1); 906100#L2892 assume !(1 == callOnFloor_~floorID#1); 906101#L2895 assume !(2 == callOnFloor_~floorID#1); 911112#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 912871#L2901-2 assume { :end_inline_callOnFloor } true; 905440#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 905441#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 912282#L1917-1 assume !(0 == getOrigin_~person#1); 908415#L1921-1 assume !(1 == getOrigin_~person#1); 906443#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 904150#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 904151#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 906968#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 906969#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 907447#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 907448#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 910033#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 907603#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 907604#L2889-2 assume !(0 == callOnFloor_~floorID#1); 908329#L2892-2 assume !(1 == callOnFloor_~floorID#1); 909857#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 910036#L2901-5 assume { :end_inline_callOnFloor } true; 909166#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 909167#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 912481#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 909505#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 909506#L2826 assume !(0 == isFloorCalling_~floorID#1); 908446#L2830 assume !(1 == isFloorCalling_~floorID#1); 908447#L2834 assume !(2 == isFloorCalling_~floorID#1); 912975#L2838 assume !(3 == isFloorCalling_~floorID#1); 904868#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 904869#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 912471#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 907803#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 907804#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 910399#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 910400#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 905643#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 906078#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 903853#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 903854#L1397 assume !(0 != timeShift_~tmp___9~2#1); 910207#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 906963#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 906964#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 911393#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 908965#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 908966#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 912413#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 908379#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 908380#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 910938#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 910939#L1121 assume !(0 != ~floorButtons_0~0); 912962#L1125 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~11#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 906415#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 911262#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 911263#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 911953#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 904086#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 905237#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 906648#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 903407#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 903408#L1156 assume !(1 == ~currentHeading~0); 903445#L1166 assume !(0 == ~currentFloorID~0); 903446#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 907798#L1172-1 assume { :end_inline_continueInDirection } true; 911724#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 913315#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 913316#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 913325#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 913364#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 913365#L1770-2 [2022-12-13 11:24:07,872 INFO L750 eck$LassoCheckResult]: Loop: 913365#L1770-2 assume !false; 913362#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 913363#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 913446#L1779-2 assume !false; 913436#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 913434#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 913365#L1770-2 [2022-12-13 11:24:07,872 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:07,872 INFO L85 PathProgramCache]: Analyzing trace with hash -889968932, now seen corresponding path program 1 times [2022-12-13 11:24:07,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:07,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [758028476] [2022-12-13 11:24:07,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:07,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:07,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:24:07,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:24:07,906 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:24:07,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [758028476] [2022-12-13 11:24:07,906 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [758028476] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:24:07,906 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:24:07,906 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 11:24:07,906 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1161200351] [2022-12-13 11:24:07,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:24:07,906 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:24:07,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:07,907 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 16 times [2022-12-13 11:24:07,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:07,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1239402004] [2022-12-13 11:24:07,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:07,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:07,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:07,910 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:24:07,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:07,913 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:24:07,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:24:07,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 11:24:07,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 11:24:07,927 INFO L87 Difference]: Start difference. First operand 24838 states and 45048 transitions. cyclomatic complexity: 20296 Second operand has 3 states, 3 states have (on average 29.0) internal successors, (87), 2 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:08,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:08,392 INFO L93 Difference]: Finished difference Result 48344 states and 87439 transitions. [2022-12-13 11:24:08,393 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48344 states and 87439 transitions. [2022-12-13 11:24:08,556 INFO L131 ngComponentsAnalysis]: Automaton has 162 accepting balls. 17078 [2022-12-13 11:24:08,667 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48344 states to 48344 states and 87439 transitions. [2022-12-13 11:24:08,667 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48202 [2022-12-13 11:24:08,705 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48202 [2022-12-13 11:24:08,705 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48344 states and 87439 transitions. [2022-12-13 11:24:08,706 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:08,706 INFO L218 hiAutomatonCegarLoop]: Abstraction has 48344 states and 87439 transitions. [2022-12-13 11:24:08,733 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48344 states and 87439 transitions. [2022-12-13 11:24:09,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48344 to 48340. [2022-12-13 11:24:09,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48340 states, 48340 states have (on average 1.8087505171700455) internal successors, (87435), 48339 states have internal predecessors, (87435), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:09,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48340 states to 48340 states and 87435 transitions. [2022-12-13 11:24:09,129 INFO L240 hiAutomatonCegarLoop]: Abstraction has 48340 states and 87435 transitions. [2022-12-13 11:24:09,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 11:24:09,130 INFO L428 stractBuchiCegarLoop]: Abstraction has 48340 states and 87435 transitions. [2022-12-13 11:24:09,130 INFO L335 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-12-13 11:24:09,130 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48340 states and 87435 transitions. [2022-12-13 11:24:09,262 INFO L131 ngComponentsAnalysis]: Automaton has 162 accepting balls. 17078 [2022-12-13 11:24:09,262 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:24:09,262 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:24:09,263 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:24:09,263 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:24:09,264 INFO L748 eck$LassoCheckResult]: Stem: 984146#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 983870#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 983871#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 986064#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 977994#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 977995#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 979688#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 979689#L1917 assume !(0 == getOrigin_~person#1); 979824#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 981301#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 981302#L3097 assume !(0 == initPersonOnFloor_~floor#1); 986364#L3124 assume !(1 == initPersonOnFloor_~floor#1); 977584#L3151 assume !(2 == initPersonOnFloor_~floor#1); 977585#L3178 assume 3 == initPersonOnFloor_~floor#1; 984151#L3179 assume !(0 == initPersonOnFloor_~person#1); 980414#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 977709#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 984039#L2889 assume !(0 == callOnFloor_~floorID#1); 979297#L2892 assume !(1 == callOnFloor_~floorID#1); 979298#L2895 assume !(2 == callOnFloor_~floorID#1); 984383#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 986259#L2901-2 assume { :end_inline_callOnFloor } true; 978633#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 978634#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 985610#L1917-1 assume !(0 == getOrigin_~person#1); 981648#L1921-1 assume !(1 == getOrigin_~person#1); 979645#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 977336#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 977337#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 980172#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 980173#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 980662#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 980663#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 983279#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 980823#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 980824#L2889-2 assume !(0 == callOnFloor_~floorID#1); 981565#L2892-2 assume !(1 == callOnFloor_~floorID#1); 983096#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 983282#L2901-5 assume { :end_inline_callOnFloor } true; 982397#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 982398#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 985830#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 982742#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 982743#L2826 assume !(0 == isFloorCalling_~floorID#1); 981681#L2830 assume !(1 == isFloorCalling_~floorID#1); 981682#L2834 assume !(2 == isFloorCalling_~floorID#1); 986378#L2838 assume !(3 == isFloorCalling_~floorID#1); 978056#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 978057#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 985820#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 981029#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 981030#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 983670#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 983671#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 978839#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 979275#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 977040#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 977041#L1397 assume !(0 != timeShift_~tmp___9~2#1); 983467#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 980167#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 980168#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 984677#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 982191#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 982192#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 985758#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 981615#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 981616#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 984213#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 984214#L1121 assume !(0 != ~floorButtons_0~0); 986366#L1125 assume !(0 != ~floorButtons_1~0); 984291#L1129 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~11#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 979617#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 984539#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 984540#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 985263#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 977272#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 978427#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 979848#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 976595#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 976596#L1156 assume !(1 == ~currentHeading~0); 976633#L1166 assume !(0 == ~currentFloorID~0); 976634#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 981024#L1172-1 assume { :end_inline_continueInDirection } true; 985025#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 979030#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 979032#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 978250#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 978251#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 988950#L1770-2 [2022-12-13 11:24:09,264 INFO L750 eck$LassoCheckResult]: Loop: 988950#L1770-2 assume !false; 988948#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 988949#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 988958#L1779-2 assume !false; 988955#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 988953#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 988950#L1770-2 [2022-12-13 11:24:09,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:09,264 INFO L85 PathProgramCache]: Analyzing trace with hash -132020878, now seen corresponding path program 1 times [2022-12-13 11:24:09,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:09,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1404680228] [2022-12-13 11:24:09,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:09,265 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:09,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:24:09,310 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:24:09,310 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:24:09,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1404680228] [2022-12-13 11:24:09,310 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1404680228] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:24:09,310 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:24:09,310 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 11:24:09,311 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [848164893] [2022-12-13 11:24:09,311 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:24:09,311 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:24:09,311 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:09,311 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 17 times [2022-12-13 11:24:09,311 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:09,311 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [730652133] [2022-12-13 11:24:09,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:09,312 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:09,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:09,314 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:24:09,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:09,318 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:24:09,331 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:24:09,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 11:24:09,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 11:24:09,331 INFO L87 Difference]: Start difference. First operand 48340 states and 87435 transitions. cyclomatic complexity: 39265 Second operand has 3 states, 3 states have (on average 29.333333333333332) internal successors, (88), 2 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:09,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:09,878 INFO L93 Difference]: Finished difference Result 95156 states and 171607 transitions. [2022-12-13 11:24:09,878 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 95156 states and 171607 transitions. [2022-12-13 11:24:10,189 INFO L131 ngComponentsAnalysis]: Automaton has 322 accepting balls. 33954 [2022-12-13 11:24:10,440 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 95156 states to 95156 states and 171607 transitions. [2022-12-13 11:24:10,440 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 94882 [2022-12-13 11:24:10,516 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 94882 [2022-12-13 11:24:10,516 INFO L73 IsDeterministic]: Start isDeterministic. Operand 95156 states and 171607 transitions. [2022-12-13 11:24:10,556 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:10,556 INFO L218 hiAutomatonCegarLoop]: Abstraction has 95156 states and 171607 transitions. [2022-12-13 11:24:10,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95156 states and 171607 transitions. [2022-12-13 11:24:11,249 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95156 to 95148. [2022-12-13 11:24:11,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95148 states, 95148 states have (on average 1.8034956068440744) internal successors, (171599), 95147 states have internal predecessors, (171599), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:11,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95148 states to 95148 states and 171599 transitions. [2022-12-13 11:24:11,469 INFO L240 hiAutomatonCegarLoop]: Abstraction has 95148 states and 171599 transitions. [2022-12-13 11:24:11,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 11:24:11,470 INFO L428 stractBuchiCegarLoop]: Abstraction has 95148 states and 171599 transitions. [2022-12-13 11:24:11,470 INFO L335 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-12-13 11:24:11,470 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 95148 states and 171599 transitions. [2022-12-13 11:24:11,729 INFO L131 ngComponentsAnalysis]: Automaton has 322 accepting balls. 33954 [2022-12-13 11:24:11,729 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:24:11,729 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:24:11,729 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:24:11,729 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:24:11,729 INFO L748 eck$LassoCheckResult]: Stem: 1127632#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1127357#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1127358#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1129500#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 1121490#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 1121491#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1123179#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1123180#L1917 assume !(0 == getOrigin_~person#1); 1123318#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 1124792#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1124793#L3097 assume !(0 == initPersonOnFloor_~floor#1); 1129801#L3124 assume !(1 == initPersonOnFloor_~floor#1); 1121082#L3151 assume !(2 == initPersonOnFloor_~floor#1); 1121083#L3178 assume 3 == initPersonOnFloor_~floor#1; 1127636#L3179 assume !(0 == initPersonOnFloor_~person#1); 1123911#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1121201#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1127523#L2889 assume !(0 == callOnFloor_~floorID#1); 1122784#L2892 assume !(1 == callOnFloor_~floorID#1); 1122785#L2895 assume !(2 == callOnFloor_~floorID#1); 1127863#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1129697#L2901-2 assume { :end_inline_callOnFloor } true; 1122126#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1122127#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1129074#L1917-1 assume !(0 == getOrigin_~person#1); 1125134#L1921-1 assume !(1 == getOrigin_~person#1); 1123138#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 1120831#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1120832#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 1123669#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 1123670#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 1124151#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 1124152#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 1126780#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1124308#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1124309#L2889-2 assume !(0 == callOnFloor_~floorID#1); 1125050#L2892-2 assume !(1 == callOnFloor_~floorID#1); 1126593#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1126786#L2901-5 assume { :end_inline_callOnFloor } true; 1125879#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1125880#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 1129286#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 1126236#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1126237#L2826 assume !(0 == isFloorCalling_~floorID#1); 1125165#L2830 assume !(1 == isFloorCalling_~floorID#1); 1125166#L2834 assume !(2 == isFloorCalling_~floorID#1); 1129816#L2838 assume !(3 == isFloorCalling_~floorID#1); 1121555#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1121556#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 1129275#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1124512#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1124513#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1127158#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1127159#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1122328#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 1122762#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 1120536#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1120537#L1397 assume !(0 != timeShift_~tmp___9~2#1); 1126963#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 1123664#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1123665#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 1128154#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 1125682#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 1125683#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 1129218#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1125103#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 1125104#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 1127699#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 1127700#L1121 assume !(0 != ~floorButtons_0~0); 1129803#L1125 assume !(0 != ~floorButtons_1~0); 1127774#L1129 assume !(0 != ~floorButtons_2~0); 1127564#L1133 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~11#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 1123110#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 1128016#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1128017#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1128726#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 1120767#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 1121920#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1123341#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 1120092#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1120093#L1156 assume !(1 == ~currentHeading~0); 1120131#L1166 assume !(0 == ~currentFloorID~0); 1120132#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1124507#L1172-1 assume { :end_inline_continueInDirection } true; 1128502#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1129692#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1126624#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1121745#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 1121746#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1127239#L1770-2 [2022-12-13 11:24:11,730 INFO L750 eck$LassoCheckResult]: Loop: 1127239#L1770-2 assume !false; 1123115#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1123116#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1120062#L1779-2 assume !false; 1126430#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1126432#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1127239#L1770-2 [2022-12-13 11:24:11,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:11,730 INFO L85 PathProgramCache]: Analyzing trace with hash 1199137847, now seen corresponding path program 1 times [2022-12-13 11:24:11,730 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:11,730 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [208114296] [2022-12-13 11:24:11,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:11,730 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:11,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:24:11,759 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:24:11,759 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:24:11,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [208114296] [2022-12-13 11:24:11,759 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [208114296] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:24:11,759 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:24:11,760 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 11:24:11,760 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1179247562] [2022-12-13 11:24:11,760 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:24:11,760 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:24:11,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:11,760 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 18 times [2022-12-13 11:24:11,760 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:11,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [550868815] [2022-12-13 11:24:11,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:11,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:11,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:11,762 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:24:11,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:11,764 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:24:11,776 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:24:11,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 11:24:11,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 11:24:11,776 INFO L87 Difference]: Start difference. First operand 95148 states and 171599 transitions. cyclomatic complexity: 76789 Second operand has 3 states, 3 states have (on average 29.666666666666668) internal successors, (89), 2 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:12,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:12,688 INFO L93 Difference]: Finished difference Result 188360 states and 338655 transitions. [2022-12-13 11:24:12,688 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 188360 states and 338655 transitions. [2022-12-13 11:24:13,334 INFO L131 ngComponentsAnalysis]: Automaton has 642 accepting balls. 67566 [2022-12-13 11:24:13,808 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 188360 states to 188360 states and 338655 transitions. [2022-12-13 11:24:13,809 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 187830 [2022-12-13 11:24:13,934 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 187830 [2022-12-13 11:24:13,935 INFO L73 IsDeterministic]: Start isDeterministic. Operand 188360 states and 338655 transitions. [2022-12-13 11:24:13,980 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:13,980 INFO L218 hiAutomatonCegarLoop]: Abstraction has 188360 states and 338655 transitions. [2022-12-13 11:24:14,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188360 states and 338655 transitions. [2022-12-13 11:24:15,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188360 to 188344. [2022-12-13 11:24:15,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188344 states, 188344 states have (on average 1.7979813532684874) internal successors, (338639), 188343 states have internal predecessors, (338639), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:15,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188344 states to 188344 states and 338639 transitions. [2022-12-13 11:24:15,894 INFO L240 hiAutomatonCegarLoop]: Abstraction has 188344 states and 338639 transitions. [2022-12-13 11:24:15,895 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 11:24:15,895 INFO L428 stractBuchiCegarLoop]: Abstraction has 188344 states and 338639 transitions. [2022-12-13 11:24:15,895 INFO L335 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2022-12-13 11:24:15,895 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 188344 states and 338639 transitions. [2022-12-13 11:24:16,752 INFO L131 ngComponentsAnalysis]: Automaton has 642 accepting balls. 67566 [2022-12-13 11:24:16,752 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:24:16,752 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:24:16,753 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:24:16,753 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:24:16,753 INFO L748 eck$LassoCheckResult]: Stem: 1411277#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1410993#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1410994#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1413252#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 1405007#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 1405008#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1406706#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1406707#L1917 assume !(0 == getOrigin_~person#1); 1406845#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 1408345#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1408346#L3097 assume !(0 == initPersonOnFloor_~floor#1); 1413605#L3124 assume !(1 == initPersonOnFloor_~floor#1); 1404595#L3151 assume !(2 == initPersonOnFloor_~floor#1); 1404596#L3178 assume 3 == initPersonOnFloor_~floor#1; 1411281#L3179 assume !(0 == initPersonOnFloor_~person#1); 1407448#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1404718#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1411168#L2889 assume !(0 == callOnFloor_~floorID#1); 1406311#L2892 assume !(1 == callOnFloor_~floorID#1); 1406312#L2895 assume !(2 == callOnFloor_~floorID#1); 1411518#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1413482#L2901-2 assume { :end_inline_callOnFloor } true; 1405643#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1405644#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1412769#L1917-1 assume !(0 == getOrigin_~person#1); 1408701#L1921-1 assume !(1 == getOrigin_~person#1); 1406662#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 1404344#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1404345#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 1407201#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 1407202#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 1407698#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 1407699#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 1410381#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1407858#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1407859#L2889-2 assume !(0 == callOnFloor_~floorID#1); 1408612#L2892-2 assume !(1 == callOnFloor_~floorID#1); 1410193#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1410386#L2901-5 assume { :end_inline_callOnFloor } true; 1409478#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1409479#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 1413005#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 1409830#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1409831#L2826 assume !(0 == isFloorCalling_~floorID#1); 1408733#L2830 assume !(1 == isFloorCalling_~floorID#1); 1408734#L2834 assume !(2 == isFloorCalling_~floorID#1); 1413630#L2838 assume !(3 == isFloorCalling_~floorID#1); 1405072#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1405073#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 1412992#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1408061#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1408062#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1410777#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1410778#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1405845#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 1406288#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 1404050#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1404051#L1397 assume !(0 != timeShift_~tmp___9~2#1); 1410570#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 1407196#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1407197#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 1411811#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 1409266#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 1409267#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 1412930#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1408664#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 1408665#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 1411344#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 1411345#L1121 assume !(0 != ~floorButtons_0~0); 1413607#L1125 assume !(0 != ~floorButtons_1~0); 1411423#L1129 assume !(0 != ~floorButtons_2~0); 1411210#L1133 assume !(0 != ~floorButtons_3~0); 1406634#L1137 assume 0 != ~floorButtons_4~0;isAnyLiftButtonPressed_~retValue_acc~11#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 1406635#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 1411678#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1411679#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1412417#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 1404281#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 1405441#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1406870#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 1403606#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1403607#L1156 assume !(1 == ~currentHeading~0); 1403643#L1166 assume !(0 == ~currentFloorID~0); 1403644#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1408056#L1172-1 assume { :end_inline_continueInDirection } true; 1412167#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1424097#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1424098#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1424107#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 1424187#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1424188#L1770-2 [2022-12-13 11:24:16,753 INFO L750 eck$LassoCheckResult]: Loop: 1424188#L1770-2 assume !false; 1424185#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1424186#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1424261#L1779-2 assume !false; 1424259#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1424258#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1424188#L1770-2 [2022-12-13 11:24:16,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:16,753 INFO L85 PathProgramCache]: Analyzing trace with hash -1175009107, now seen corresponding path program 1 times [2022-12-13 11:24:16,753 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:16,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1239654826] [2022-12-13 11:24:16,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:16,754 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:16,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:24:16,785 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:24:16,785 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:24:16,785 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1239654826] [2022-12-13 11:24:16,785 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1239654826] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:24:16,785 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:24:16,785 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 11:24:16,785 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2049390847] [2022-12-13 11:24:16,785 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:24:16,785 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:24:16,785 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:16,786 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 19 times [2022-12-13 11:24:16,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:16,786 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1669677660] [2022-12-13 11:24:16,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:16,786 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:16,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:16,788 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:24:16,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:16,789 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:24:16,799 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:24:16,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 11:24:16,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 11:24:16,800 INFO L87 Difference]: Start difference. First operand 188344 states and 338639 transitions. cyclomatic complexity: 150969 Second operand has 3 states, 3 states have (on average 30.0) internal successors, (90), 2 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:18,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:18,643 INFO L93 Difference]: Finished difference Result 373896 states and 670097 transitions. [2022-12-13 11:24:18,643 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 373896 states and 670097 transitions. [2022-12-13 11:24:20,069 INFO L131 ngComponentsAnalysis]: Automaton has 1280 accepting balls. 134424 [2022-12-13 11:24:21,034 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 373896 states to 373896 states and 670097 transitions. [2022-12-13 11:24:21,034 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 372872 [2022-12-13 11:24:21,331 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 372872 [2022-12-13 11:24:21,332 INFO L73 IsDeterministic]: Start isDeterministic. Operand 373896 states and 670097 transitions. [2022-12-13 11:24:21,332 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:21,332 INFO L218 hiAutomatonCegarLoop]: Abstraction has 373896 states and 670097 transitions. [2022-12-13 11:24:21,524 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 373896 states and 670097 transitions. [2022-12-13 11:24:23,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 373896 to 373864. [2022-12-13 11:24:24,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 373864 states, 373864 states have (on average 1.7922693813793251) internal successors, (670065), 373863 states have internal predecessors, (670065), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:24,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 373864 states to 373864 states and 670065 transitions. [2022-12-13 11:24:24,983 INFO L240 hiAutomatonCegarLoop]: Abstraction has 373864 states and 670065 transitions. [2022-12-13 11:24:24,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 11:24:24,984 INFO L428 stractBuchiCegarLoop]: Abstraction has 373864 states and 670065 transitions. [2022-12-13 11:24:24,984 INFO L335 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2022-12-13 11:24:24,984 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 373864 states and 670065 transitions. [2022-12-13 11:24:25,841 INFO L131 ngComponentsAnalysis]: Automaton has 1280 accepting balls. 134424 [2022-12-13 11:24:25,841 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:24:25,841 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:24:25,842 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:24:25,842 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:24:25,842 INFO L748 eck$LassoCheckResult]: Stem: 1973557#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1973256#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1973257#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1975624#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 1967254#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 1967255#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1968962#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1968963#L1917 assume !(0 == getOrigin_~person#1); 1969102#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 1970605#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1970606#L3097 assume !(0 == initPersonOnFloor_~floor#1); 1975948#L3124 assume !(1 == initPersonOnFloor_~floor#1); 1966842#L3151 assume !(2 == initPersonOnFloor_~floor#1); 1966843#L3178 assume 3 == initPersonOnFloor_~floor#1; 1973561#L3179 assume !(0 == initPersonOnFloor_~person#1); 1969703#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1966969#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1973440#L2889 assume !(0 == callOnFloor_~floorID#1); 1968562#L2892 assume !(1 == callOnFloor_~floorID#1); 1968563#L2895 assume !(2 == callOnFloor_~floorID#1); 1973809#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1975839#L2901-2 assume { :end_inline_callOnFloor } true; 1967889#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1967890#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 1975113#L1917-1 assume !(0 == getOrigin_~person#1); 1970961#L1921-1 assume !(1 == getOrigin_~person#1); 1968917#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 1966592#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1966593#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 1969455#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 1969456#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 1969951#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 1969952#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 1972637#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1970114#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1970115#L2889-2 assume !(0 == callOnFloor_~floorID#1); 1970874#L2892-2 assume !(1 == callOnFloor_~floorID#1); 1972455#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1972640#L2901-5 assume { :end_inline_callOnFloor } true; 1971733#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1971734#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 1975360#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 1972084#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1972085#L2826 assume !(0 == isFloorCalling_~floorID#1); 1970991#L2830 assume !(1 == isFloorCalling_~floorID#1); 1970992#L2834 assume !(2 == isFloorCalling_~floorID#1); 1975970#L2838 assume !(3 == isFloorCalling_~floorID#1); 1967316#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1967317#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 1975347#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 1970326#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 1970327#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1973043#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1973044#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1968097#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 1968539#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 1966296#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1966297#L1397 assume !(0 != timeShift_~tmp___9~2#1); 1972837#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 1969448#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 1969449#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 1974102#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 1971524#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 1971525#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 1975277#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 1970926#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 1970927#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 1973624#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 1973625#L1121 assume !(0 != ~floorButtons_0~0); 1975950#L1125 assume !(0 != ~floorButtons_1~0); 1973708#L1129 assume !(0 != ~floorButtons_2~0); 1973484#L1133 assume !(0 != ~floorButtons_3~0); 1968888#L1137 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~11#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 1968889#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 1973968#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1973969#L711-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1974745#L880-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 1966529#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 1967684#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1969126#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 1965852#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 1965853#L1156 assume !(1 == ~currentHeading~0); 1965889#L1166 assume !(0 == ~currentFloorID~0); 1965890#L1166-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1970321#L1172-1 assume { :end_inline_continueInDirection } true; 1974485#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 1990919#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 1990920#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1992803#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 1992801#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1992802#L1770-2 [2022-12-13 11:24:25,842 INFO L750 eck$LassoCheckResult]: Loop: 1992802#L1770-2 assume !false; 1992799#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1992800#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1992889#L1779-2 assume !false; 1992879#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1992878#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1992802#L1770-2 [2022-12-13 11:24:25,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:25,843 INFO L85 PathProgramCache]: Analyzing trace with hash 1125813483, now seen corresponding path program 1 times [2022-12-13 11:24:25,843 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:25,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1295560428] [2022-12-13 11:24:25,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:25,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:25,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:24:25,913 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:24:25,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:24:25,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1295560428] [2022-12-13 11:24:25,913 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1295560428] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:24:25,913 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:24:25,913 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 11:24:25,913 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1362190463] [2022-12-13 11:24:25,913 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:24:25,914 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:24:25,914 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:24:25,914 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 20 times [2022-12-13 11:24:25,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:24:25,914 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [52379307] [2022-12-13 11:24:25,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:24:25,914 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:24:25,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:25,917 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:24:25,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:24:25,919 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:24:25,935 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:24:25,935 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 11:24:25,935 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 11:24:25,935 INFO L87 Difference]: Start difference. First operand 373864 states and 670065 transitions. cyclomatic complexity: 297545 Second operand has 6 states, 6 states have (on average 15.0) internal successors, (90), 5 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:24:33,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:24:33,538 INFO L93 Difference]: Finished difference Result 1847150 states and 3318096 transitions. [2022-12-13 11:24:33,538 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1847150 states and 3318096 transitions. [2022-12-13 11:24:41,630 INFO L131 ngComponentsAnalysis]: Automaton has 7982 accepting balls. 1001762 [2022-12-13 11:24:47,311 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 1847150 states to 1847150 states and 3318096 transitions. [2022-12-13 11:24:47,312 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 1845968 [2022-12-13 11:24:48,371 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 1845968 [2022-12-13 11:24:48,371 INFO L73 IsDeterministic]: Start isDeterministic. Operand 1847150 states and 3318096 transitions. [2022-12-13 11:24:48,373 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 11:24:48,373 INFO L218 hiAutomatonCegarLoop]: Abstraction has 1847150 states and 3318096 transitions. [2022-12-13 11:24:49,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1847150 states and 3318096 transitions. [2022-12-13 11:24:58,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1847150 to 651591. [2022-12-13 11:24:59,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 651591 states, 651591 states have (on average 1.7899556623710273) internal successors, (1166319), 651590 states have internal predecessors, (1166319), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:25:00,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 651591 states to 651591 states and 1166319 transitions. [2022-12-13 11:25:00,725 INFO L240 hiAutomatonCegarLoop]: Abstraction has 651591 states and 1166319 transitions. [2022-12-13 11:25:00,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-13 11:25:00,726 INFO L428 stractBuchiCegarLoop]: Abstraction has 651591 states and 1166319 transitions. [2022-12-13 11:25:00,726 INFO L335 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2022-12-13 11:25:00,726 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 651591 states and 1166319 transitions. [2022-12-13 11:25:02,348 INFO L131 ngComponentsAnalysis]: Automaton has 2312 accepting balls. 253168 [2022-12-13 11:25:02,348 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 11:25:02,349 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 11:25:02,350 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 11:25:02,350 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2022-12-13 11:25:02,350 INFO L748 eck$LassoCheckResult]: Stem: 4194650#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4194348#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret116#1, main_~retValue_acc~23#1, main_~tmp~25#1;havoc main_~retValue_acc~23#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 4194349#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4196854#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~28#1;havoc valid_product_~retValue_acc~28#1;valid_product_~retValue_acc~28#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~28#1; 4188267#valid_product_returnLabel#1 main_#t~ret116#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret116#1;havoc main_#t~ret116#1; 4188268#L2329 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 4189971#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret105#1, aliceCall_~tmp~18#1;havoc aliceCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 4189972#L1917 assume !(0 == getOrigin_~person#1); 4190105#L1921 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 4191623#getOrigin_returnLabel#1 aliceCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~18#1 := aliceCall_#t~ret105#1;havoc aliceCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4191624#L3097 assume !(0 == initPersonOnFloor_~floor#1); 4197232#L3124 assume !(1 == initPersonOnFloor_~floor#1); 4187857#L3151 assume !(2 == initPersonOnFloor_~floor#1); 4187858#L3178 assume 3 == initPersonOnFloor_~floor#1; 4194654#L3179 assume !(0 == initPersonOnFloor_~person#1); 4190710#L3182 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 4187979#L3205-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4194532#L2889 assume !(0 == callOnFloor_~floorID#1); 4189569#L2892 assume !(1 == callOnFloor_~floorID#1); 4189570#L2895 assume !(2 == callOnFloor_~floorID#1); 4194914#L2898 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 4197087#L2901-2 assume { :end_inline_callOnFloor } true; 4188899#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 4188900#aliceCall_returnLabel#1 assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret106#1, angelinaCall_~tmp~19#1;havoc angelinaCall_~tmp~19#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~20#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~20#1; 4196327#L1917-1 assume !(0 == getOrigin_~person#1); 4191991#L1921-1 assume !(1 == getOrigin_~person#1); 4189925#L1925-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~20#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~20#1; 4187612#getOrigin_returnLabel#2 angelinaCall_#t~ret106#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~19#1 := angelinaCall_#t~ret106#1;havoc angelinaCall_#t~ret106#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~19#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4187613#L3097-1 assume !(0 == initPersonOnFloor_~floor#1); 4190466#L3124-1 assume !(1 == initPersonOnFloor_~floor#1); 4190467#L3151-1 assume 2 == initPersonOnFloor_~floor#1; 4190959#L3152-2 assume !(0 == initPersonOnFloor_~person#1); 4190960#L3155-2 assume !(1 == initPersonOnFloor_~person#1); 4193727#L3158-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 4191128#L3205-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4191129#L2889-2 assume !(0 == callOnFloor_~floorID#1); 4191892#L2892-2 assume !(1 == callOnFloor_~floorID#1); 4193523#L2895-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 4193730#L2901-5 assume { :end_inline_callOnFloor } true; 4192779#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 4192780#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret4#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 4196597#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret4#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret4#1;havoc __utac_acc__Specification13_spec__1_#t~ret4#1; 4193142#__utac_acc__Specification13_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1, stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~14#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~14#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 4193143#L2826 assume !(0 == isFloorCalling_~floorID#1); 4192027#L2830 assume !(1 == isFloorCalling_~floorID#1); 4192028#L2834 assume !(2 == isFloorCalling_~floorID#1); 4197260#L2838 assume !(3 == isFloorCalling_~floorID#1); 4188330#L2842 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 4188331#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 4196583#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret49#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret49#1;havoc stopRequestedAtCurrentFloor_#t~ret49#1; 4191341#L1244 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp4~0#1 / 3); 4191342#L1218-1 assume ~weight~0 > stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4194134#getCurrentFloorID_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret46#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp~12#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 4194135#L524-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 4189103#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;havoc stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#t~ret47#1;stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1 := (if 1 == stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_~retValue_acc~13#1; 4189546#stopRequestedAtCurrentFloor__wrappee__twothirdsfull_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__twothirdsfull } true;stopRequestedAtCurrentFloor_~retValue_acc~14#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~14#1; 4187320#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 4187321#L1397 assume !(0 != timeShift_~tmp___9~2#1); 4193920#L1488 assume 1 == ~doorState~0;~doorState~0 := 0; 4190460#L1488-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~9#1, stopRequestedInDirection_~tmp___0~5#1, stopRequestedInDirection_~__cil_tmp7~1#1, stopRequestedInDirection_~__cil_tmp8~2#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~9#1;havoc stopRequestedInDirection_~tmp___0~5#1;havoc stopRequestedInDirection_~__cil_tmp7~1#1;havoc stopRequestedInDirection_~__cil_tmp8~2#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret102#1, isExecutiveFloorCalling_~retValue_acc~17#1;havoc isExecutiveFloorCalling_~retValue_acc~17#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~29#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~29#1; 4190461#L2826-3 assume !(0 == isFloorCalling_~floorID#1); 4195223#L2830-3 assume !(1 == isFloorCalling_~floorID#1); 4192556#L2834-3 assume !(2 == isFloorCalling_~floorID#1); 4192557#L2838-3 assume !(3 == isFloorCalling_~floorID#1); 4196505#L2842-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~29#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~29#1; 4191948#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret102#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~17#1 := isExecutiveFloorCalling_#t~ret102#1;havoc isExecutiveFloorCalling_#t~ret102#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~17#1; 4191949#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret40#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~5#1 := stopRequestedInDirection_#t~ret40#1;havoc stopRequestedInDirection_#t~ret40#1; 4194718#L1099 assume !(0 != stopRequestedInDirection_~tmp___0~5#1);assume { :begin_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#res#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret37#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret38#1, stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1, stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1, stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1, stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1, stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~dir#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~dir#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 := 2 * ~maximumWeight~0;stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 := (if stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 < 0 && 0 != stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 % 3 then 1 + stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3 else stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp8~1#1 / 3);stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection__wrappee__twothirdsfull_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1;havoc isAnyLiftButtonPressed_~retValue_acc~11#1; 4194719#L1121 assume !(0 != ~floorButtons_0~0); 4197236#L1125 assume !(0 != ~floorButtons_1~0); 4194806#L1129 assume !(0 != ~floorButtons_2~0); 4194577#L1133 assume !(0 != ~floorButtons_3~0); 4189895#L1137 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~11#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~11#1; 4189896#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret36#1;stopRequestedInDirection__wrappee__twothirdsfull_~buttonPressed~0#1 := stopRequestedInDirection__wrappee__twothirdsfull_~tmp~8#1; 4195075#L1065 assume !(0 != stopRequestedInDirection__wrappee__twothirdsfull_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__twothirdsfull_~dir#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectFloorCalls#1, stopRequestedInDirection__wrappee__twothirdsfull_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1, stopRequestedInDirection__wrappee__weight_#t~ret26#1, stopRequestedInDirection__wrappee__weight_#t~ret27#1, stopRequestedInDirection__wrappee__weight_#t~ret28#1, stopRequestedInDirection__wrappee__weight_#t~ret29#1, stopRequestedInDirection__wrappee__weight_#t~ret30#1, stopRequestedInDirection__wrappee__weight_#t~ret31#1, stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~4#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~2#1, stopRequestedInDirection__wrappee__weight_~tmp___4~1#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 4195076#L711-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~31#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~31#1;isTopFloor_~retValue_acc~31#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~31#1; 4195917#isTopFloor_returnLabel#3 stopRequestedInDirection__wrappee__weight_#t~ret25#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~7#1 := stopRequestedInDirection__wrappee__weight_#t~ret25#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret25#1; 4195478#L715-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~7#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~8#1; 4187552#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1 := stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;havoc stopRequestedInDirection__wrappee__twothirdsfull_#t~ret39#1;stopRequestedInDirection__wrappee__twothirdsfull_#res#1 := stopRequestedInDirection__wrappee__twothirdsfull_~retValue_acc~9#1; 4188695#stopRequestedInDirection__wrappee__twothirdsfull_returnLabel#1 stopRequestedInDirection_#t~ret42#1 := stopRequestedInDirection__wrappee__twothirdsfull_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__twothirdsfull } true;stopRequestedInDirection_~retValue_acc~10#1 := stopRequestedInDirection_#t~ret42#1;havoc stopRequestedInDirection_#t~ret42#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 4190134#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 4186888#L1496 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~10#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~10#1;~currentHeading~0 := continueInDirection_~dir#1; 4186889#L1156 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~31#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~31#1;isTopFloor_~retValue_acc~31#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~31#1; 4189774#isTopFloor_returnLabel#4 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~10#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 4195351#L1160 assume 0 != continueInDirection_~tmp~10#1;~currentHeading~0 := 0; 4195352#L1166-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4191336#L1172-1 assume { :end_inline_continueInDirection } true; 4195643#L1505-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret5#1, __utac_acc__Specification13_spec__2_#t~ret6#1, __utac_acc__Specification13_spec__2_#t~ret7#1, __utac_acc__Specification13_spec__2_#t~ret8#1, __utac_acc__Specification13_spec__2_#t~ret9#1, __utac_acc__Specification13_spec__2_#t~ret10#1, __utac_acc__Specification13_spec__2_~tmp~0#1, __utac_acc__Specification13_spec__2_~tmp___0~0#1, __utac_acc__Specification13_spec__2_~tmp___1~0#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 4217229#L108 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 4217225#L109 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~16#1, existInLiftCallsInDirection_~i~2#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~16#1;havoc existInLiftCallsInDirection_~i~2#1;havoc existInLiftCallsInDirection_~i___0~0#1; 4217226#L1700 assume !(1 == existInLiftCallsInDirection_~d#1); 4217627#L1766 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 4217626#L1770-2 [2022-12-13 11:25:02,350 INFO L750 eck$LassoCheckResult]: Loop: 4217626#L1770-2 assume !false; 4217625#L1771 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 4217624#L1772 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 4217622#L1779-2 assume !false; 4217620#L1780 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 4217621#L1838 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 4217626#L1770-2 [2022-12-13 11:25:02,350 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:25:02,351 INFO L85 PathProgramCache]: Analyzing trace with hash -1392968235, now seen corresponding path program 1 times [2022-12-13 11:25:02,351 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:25:02,351 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [236579604] [2022-12-13 11:25:02,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:25:02,351 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:25:02,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 11:25:02,418 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 11:25:02,418 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 11:25:02,419 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [236579604] [2022-12-13 11:25:02,419 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [236579604] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 11:25:02,419 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 11:25:02,419 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 11:25:02,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [614399005] [2022-12-13 11:25:02,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 11:25:02,419 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 11:25:02,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 11:25:02,420 INFO L85 PathProgramCache]: Analyzing trace with hash -1087190869, now seen corresponding path program 21 times [2022-12-13 11:25:02,420 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 11:25:02,420 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1373955441] [2022-12-13 11:25:02,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 11:25:02,420 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 11:25:02,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:25:02,422 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 11:25:02,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 11:25:02,424 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 11:25:02,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 11:25:02,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 11:25:02,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 11:25:02,438 INFO L87 Difference]: Start difference. First operand 651591 states and 1166319 transitions. cyclomatic complexity: 517106 Second operand has 6 states, 6 states have (on average 15.333333333333334) internal successors, (92), 6 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 11:25:08,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 11:25:08,402 INFO L93 Difference]: Finished difference Result 1338736 states and 2363510 transitions. [2022-12-13 11:25:08,402 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1338736 states and 2363510 transitions. [2022-12-13 11:25:13,777 INFO L131 ngComponentsAnalysis]: Automaton has 9514 accepting balls. 673856