./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a3102ca0659fbbd15269b525dd7b096164ab7cd0af67dfa99033803ea46b0a8e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 13:05:17,065 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 13:05:17,067 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 13:05:17,079 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 13:05:17,079 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 13:05:17,080 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 13:05:17,080 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 13:05:17,081 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 13:05:17,082 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 13:05:17,083 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 13:05:17,084 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 13:05:17,084 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 13:05:17,085 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 13:05:17,085 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 13:05:17,086 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 13:05:17,086 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 13:05:17,087 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 13:05:17,088 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 13:05:17,089 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 13:05:17,090 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 13:05:17,091 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 13:05:17,092 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 13:05:17,094 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 13:05:17,095 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 13:05:17,097 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 13:05:17,097 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 13:05:17,098 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 13:05:17,098 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 13:05:17,098 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 13:05:17,099 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 13:05:17,099 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 13:05:17,100 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 13:05:17,100 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 13:05:17,101 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 13:05:17,101 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 13:05:17,102 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 13:05:17,102 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 13:05:17,102 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 13:05:17,102 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 13:05:17,103 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 13:05:17,103 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 13:05:17,104 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/config/svcomp-Reach-32bit-Taipan_Default.epf [2022-12-14 13:05:17,118 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 13:05:17,118 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 13:05:17,119 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 13:05:17,119 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 13:05:17,119 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 13:05:17,119 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 13:05:17,119 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 13:05:17,119 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 13:05:17,120 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 13:05:17,120 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 13:05:17,120 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 13:05:17,120 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 13:05:17,120 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 13:05:17,120 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 13:05:17,120 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 13:05:17,120 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 13:05:17,120 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 13:05:17,120 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 13:05:17,121 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 13:05:17,121 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 13:05:17,121 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 13:05:17,121 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 13:05:17,121 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 13:05:17,121 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-14 13:05:17,121 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 13:05:17,121 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-14 13:05:17,122 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 13:05:17,122 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-14 13:05:17,122 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 13:05:17,122 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-14 13:05:17,122 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 13:05:17,122 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 13:05:17,122 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 13:05:17,122 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 13:05:17,122 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 13:05:17,122 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 13:05:17,123 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-14 13:05:17,123 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 13:05:17,123 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 13:05:17,123 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-14 13:05:17,123 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 13:05:17,123 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a3102ca0659fbbd15269b525dd7b096164ab7cd0af67dfa99033803ea46b0a8e [2022-12-14 13:05:17,330 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 13:05:17,350 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 13:05:17,352 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 13:05:17,353 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 13:05:17,353 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 13:05:17,354 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c [2022-12-14 13:05:19,932 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 13:05:20,200 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 13:05:20,200 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c [2022-12-14 13:05:20,218 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/data/b315f1293/e39eea9f5e574812bf812f401af797bb/FLAG667c6c713 [2022-12-14 13:05:20,228 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/data/b315f1293/e39eea9f5e574812bf812f401af797bb [2022-12-14 13:05:20,230 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 13:05:20,231 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 13:05:20,232 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 13:05:20,232 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 13:05:20,235 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 13:05:20,235 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,236 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@33df0629 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20, skipping insertion in model container [2022-12-14 13:05:20,236 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,241 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 13:05:20,281 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 13:05:20,409 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c[3700,3713] [2022-12-14 13:05:20,580 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 13:05:20,591 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 13:05:20,604 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/sv-benchmarks/c/product-lines/elevator_spec14_product11.cil.c[3700,3713] [2022-12-14 13:05:20,668 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 13:05:20,684 INFO L208 MainTranslator]: Completed translation [2022-12-14 13:05:20,685 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20 WrapperNode [2022-12-14 13:05:20,685 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 13:05:20,685 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 13:05:20,686 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 13:05:20,686 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 13:05:20,691 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,711 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,741 INFO L138 Inliner]: procedures = 90, calls = 331, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 1061 [2022-12-14 13:05:20,741 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 13:05:20,741 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 13:05:20,742 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 13:05:20,742 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 13:05:20,758 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,758 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,761 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,761 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,780 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,792 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,794 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,797 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,801 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 13:05:20,802 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 13:05:20,802 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 13:05:20,802 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 13:05:20,803 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (1/1) ... [2022-12-14 13:05:20,807 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 13:05:20,816 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:05:20,827 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 13:05:20,829 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 13:05:20,860 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 13:05:20,860 INFO L130 BoogieDeclarations]: Found specification of procedure bigMacCall [2022-12-14 13:05:20,860 INFO L138 BoogieDeclarations]: Found implementation of procedure bigMacCall [2022-12-14 13:05:20,860 INFO L130 BoogieDeclarations]: Found specification of procedure enterElevator [2022-12-14 13:05:20,860 INFO L138 BoogieDeclarations]: Found implementation of procedure enterElevator [2022-12-14 13:05:20,861 INFO L130 BoogieDeclarations]: Found specification of procedure isExecutiveFloorCalling [2022-12-14 13:05:20,861 INFO L138 BoogieDeclarations]: Found implementation of procedure isExecutiveFloorCalling [2022-12-14 13:05:20,861 INFO L130 BoogieDeclarations]: Found specification of procedure stopRequestedInDirection [2022-12-14 13:05:20,861 INFO L138 BoogieDeclarations]: Found implementation of procedure stopRequestedInDirection [2022-12-14 13:05:20,861 INFO L130 BoogieDeclarations]: Found specification of procedure bobCall [2022-12-14 13:05:20,861 INFO L138 BoogieDeclarations]: Found implementation of procedure bobCall [2022-12-14 13:05:20,861 INFO L130 BoogieDeclarations]: Found specification of procedure getReverseHeading [2022-12-14 13:05:20,861 INFO L138 BoogieDeclarations]: Found implementation of procedure getReverseHeading [2022-12-14 13:05:20,861 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-14 13:05:20,861 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-14 13:05:20,861 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-14 13:05:20,862 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-14 13:05:20,862 INFO L130 BoogieDeclarations]: Found specification of procedure isTopFloor [2022-12-14 13:05:20,862 INFO L138 BoogieDeclarations]: Found implementation of procedure isTopFloor [2022-12-14 13:05:20,862 INFO L130 BoogieDeclarations]: Found specification of procedure getDestination [2022-12-14 13:05:20,862 INFO L138 BoogieDeclarations]: Found implementation of procedure getDestination [2022-12-14 13:05:20,862 INFO L130 BoogieDeclarations]: Found specification of procedure isBlocked [2022-12-14 13:05:20,862 INFO L138 BoogieDeclarations]: Found implementation of procedure isBlocked [2022-12-14 13:05:20,862 INFO L130 BoogieDeclarations]: Found specification of procedure getCurrentFloorID [2022-12-14 13:05:20,862 INFO L138 BoogieDeclarations]: Found implementation of procedure getCurrentFloorID [2022-12-14 13:05:20,862 INFO L130 BoogieDeclarations]: Found specification of procedure resetCallOnFloor [2022-12-14 13:05:20,862 INFO L138 BoogieDeclarations]: Found implementation of procedure resetCallOnFloor [2022-12-14 13:05:20,862 INFO L130 BoogieDeclarations]: Found specification of procedure stopRequestedAtCurrentFloor__wrappee__empty [2022-12-14 13:05:20,863 INFO L138 BoogieDeclarations]: Found implementation of procedure stopRequestedAtCurrentFloor__wrappee__empty [2022-12-14 13:05:20,863 INFO L130 BoogieDeclarations]: Found specification of procedure initPersonOnFloor [2022-12-14 13:05:20,863 INFO L138 BoogieDeclarations]: Found implementation of procedure initPersonOnFloor [2022-12-14 13:05:20,863 INFO L130 BoogieDeclarations]: Found specification of procedure removePersonFromFloor [2022-12-14 13:05:20,863 INFO L138 BoogieDeclarations]: Found implementation of procedure removePersonFromFloor [2022-12-14 13:05:20,863 INFO L130 BoogieDeclarations]: Found specification of procedure getOrigin [2022-12-14 13:05:20,863 INFO L138 BoogieDeclarations]: Found implementation of procedure getOrigin [2022-12-14 13:05:20,863 INFO L130 BoogieDeclarations]: Found specification of procedure continueInDirection [2022-12-14 13:05:20,863 INFO L138 BoogieDeclarations]: Found implementation of procedure continueInDirection [2022-12-14 13:05:20,863 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 13:05:20,864 INFO L130 BoogieDeclarations]: Found specification of procedure pressInLiftFloorButton [2022-12-14 13:05:20,864 INFO L138 BoogieDeclarations]: Found implementation of procedure pressInLiftFloorButton [2022-12-14 13:05:20,864 INFO L130 BoogieDeclarations]: Found specification of procedure leaveElevator [2022-12-14 13:05:20,864 INFO L138 BoogieDeclarations]: Found implementation of procedure leaveElevator [2022-12-14 13:05:20,864 INFO L130 BoogieDeclarations]: Found specification of procedure isPersonOnFloor [2022-12-14 13:05:20,864 INFO L138 BoogieDeclarations]: Found implementation of procedure isPersonOnFloor [2022-12-14 13:05:20,864 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 13:05:20,864 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 13:05:20,864 INFO L130 BoogieDeclarations]: Found specification of procedure isFloorCalling [2022-12-14 13:05:20,864 INFO L138 BoogieDeclarations]: Found implementation of procedure isFloorCalling [2022-12-14 13:05:20,975 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 13:05:20,977 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 13:05:21,695 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 13:05:22,085 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 13:05:22,085 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-14 13:05:22,088 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 01:05:22 BoogieIcfgContainer [2022-12-14 13:05:22,088 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 13:05:22,090 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 13:05:22,090 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 13:05:22,092 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 13:05:22,093 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 01:05:20" (1/3) ... [2022-12-14 13:05:22,093 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@66af236c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 01:05:22, skipping insertion in model container [2022-12-14 13:05:22,093 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 01:05:20" (2/3) ... [2022-12-14 13:05:22,094 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@66af236c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 01:05:22, skipping insertion in model container [2022-12-14 13:05:22,094 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 01:05:22" (3/3) ... [2022-12-14 13:05:22,095 INFO L112 eAbstractionObserver]: Analyzing ICFG elevator_spec14_product11.cil.c [2022-12-14 13:05:22,114 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 13:05:22,115 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-14 13:05:22,170 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 13:05:22,176 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1ef81aa7, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 13:05:22,177 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-14 13:05:22,182 INFO L276 IsEmpty]: Start isEmpty. Operand has 347 states, 232 states have (on average 1.5775862068965518) internal successors, (366), 248 states have internal predecessors, (366), 91 states have call successors, (91), 22 states have call predecessors, (91), 22 states have return successors, (91), 89 states have call predecessors, (91), 91 states have call successors, (91) [2022-12-14 13:05:22,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-12-14 13:05:22,201 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:22,202 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:22,202 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:22,207 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:22,207 INFO L85 PathProgramCache]: Analyzing trace with hash -1397100830, now seen corresponding path program 1 times [2022-12-14 13:05:22,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:22,217 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [928196613] [2022-12-14 13:05:22,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:22,217 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:22,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:22,773 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-12-14 13:05:22,773 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:22,773 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [928196613] [2022-12-14 13:05:22,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [928196613] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:05:22,774 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 13:05:22,774 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 13:05:22,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1725752443] [2022-12-14 13:05:22,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:05:22,779 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 13:05:22,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:05:22,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 13:05:22,807 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 13:05:22,810 INFO L87 Difference]: Start difference. First operand has 347 states, 232 states have (on average 1.5775862068965518) internal successors, (366), 248 states have internal predecessors, (366), 91 states have call successors, (91), 22 states have call predecessors, (91), 22 states have return successors, (91), 89 states have call predecessors, (91), 91 states have call successors, (91) Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-12-14 13:05:23,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:05:23,403 INFO L93 Difference]: Finished difference Result 1019 states and 1636 transitions. [2022-12-14 13:05:23,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 13:05:23,405 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 73 [2022-12-14 13:05:23,406 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:05:23,420 INFO L225 Difference]: With dead ends: 1019 [2022-12-14 13:05:23,420 INFO L226 Difference]: Without dead ends: 673 [2022-12-14 13:05:23,427 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-12-14 13:05:23,430 INFO L413 NwaCegarLoop]: 656 mSDtfsCounter, 523 mSDsluCounter, 1632 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 523 SdHoareTripleChecker+Valid, 2288 SdHoareTripleChecker+Invalid, 372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 13:05:23,431 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [523 Valid, 2288 Invalid, 372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 362 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 13:05:23,449 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 673 states. [2022-12-14 13:05:23,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 673 to 667. [2022-12-14 13:05:23,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 667 states, 449 states have (on average 1.5679287305122493) internal successors, (704), 478 states have internal predecessors, (704), 176 states have call successors, (176), 43 states have call predecessors, (176), 41 states have return successors, (182), 170 states have call predecessors, (182), 174 states have call successors, (182) [2022-12-14 13:05:23,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 667 states to 667 states and 1062 transitions. [2022-12-14 13:05:23,531 INFO L78 Accepts]: Start accepts. Automaton has 667 states and 1062 transitions. Word has length 73 [2022-12-14 13:05:23,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:05:23,531 INFO L495 AbstractCegarLoop]: Abstraction has 667 states and 1062 transitions. [2022-12-14 13:05:23,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (13), 2 states have call predecessors, (13), 2 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-12-14 13:05:23,532 INFO L276 IsEmpty]: Start isEmpty. Operand 667 states and 1062 transitions. [2022-12-14 13:05:23,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2022-12-14 13:05:23,537 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:23,537 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:23,537 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 13:05:23,538 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:23,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:23,538 INFO L85 PathProgramCache]: Analyzing trace with hash 575897435, now seen corresponding path program 1 times [2022-12-14 13:05:23,538 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:23,539 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [21029467] [2022-12-14 13:05:23,539 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:23,539 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:23,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:23,811 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-12-14 13:05:23,812 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:23,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [21029467] [2022-12-14 13:05:23,812 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [21029467] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:05:23,812 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 13:05:23,812 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 13:05:23,812 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [425717875] [2022-12-14 13:05:23,812 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:05:23,814 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 13:05:23,814 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:05:23,814 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 13:05:23,815 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 13:05:23,815 INFO L87 Difference]: Start difference. First operand 667 states and 1062 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-12-14 13:05:24,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:05:24,314 INFO L93 Difference]: Finished difference Result 764 states and 1209 transitions. [2022-12-14 13:05:24,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 13:05:24,315 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) Word has length 77 [2022-12-14 13:05:24,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:05:24,320 INFO L225 Difference]: With dead ends: 764 [2022-12-14 13:05:24,320 INFO L226 Difference]: Without dead ends: 762 [2022-12-14 13:05:24,321 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-14 13:05:24,322 INFO L413 NwaCegarLoop]: 625 mSDtfsCounter, 630 mSDsluCounter, 993 mSDsCounter, 0 mSdLazyCounter, 399 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 630 SdHoareTripleChecker+Valid, 1618 SdHoareTripleChecker+Invalid, 403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 399 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 13:05:24,323 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [630 Valid, 1618 Invalid, 403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 399 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 13:05:24,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 762 states. [2022-12-14 13:05:24,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 762 to 752. [2022-12-14 13:05:24,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 752 states, 500 states have (on average 1.534) internal successors, (767), 529 states have internal predecessors, (767), 198 states have call successors, (198), 56 states have call predecessors, (198), 53 states have return successors, (210), 190 states have call predecessors, (210), 195 states have call successors, (210) [2022-12-14 13:05:24,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 752 states to 752 states and 1175 transitions. [2022-12-14 13:05:24,377 INFO L78 Accepts]: Start accepts. Automaton has 752 states and 1175 transitions. Word has length 77 [2022-12-14 13:05:24,377 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:05:24,378 INFO L495 AbstractCegarLoop]: Abstraction has 752 states and 1175 transitions. [2022-12-14 13:05:24,378 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 3 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-12-14 13:05:24,378 INFO L276 IsEmpty]: Start isEmpty. Operand 752 states and 1175 transitions. [2022-12-14 13:05:24,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-12-14 13:05:24,383 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:24,383 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:24,383 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 13:05:24,384 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:24,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:24,391 INFO L85 PathProgramCache]: Analyzing trace with hash -470779330, now seen corresponding path program 1 times [2022-12-14 13:05:24,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:24,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [230988330] [2022-12-14 13:05:24,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:24,391 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:24,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:24,500 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2022-12-14 13:05:24,501 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:24,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [230988330] [2022-12-14 13:05:24,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [230988330] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:05:24,501 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 13:05:24,501 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 13:05:24,501 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [411395567] [2022-12-14 13:05:24,501 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:05:24,502 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 13:05:24,502 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:05:24,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 13:05:24,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 13:05:24,503 INFO L87 Difference]: Start difference. First operand 752 states and 1175 transitions. Second operand has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-12-14 13:05:24,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:05:24,652 INFO L93 Difference]: Finished difference Result 1530 states and 2419 transitions. [2022-12-14 13:05:24,652 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 13:05:24,652 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) Word has length 108 [2022-12-14 13:05:24,653 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:05:24,658 INFO L225 Difference]: With dead ends: 1530 [2022-12-14 13:05:24,658 INFO L226 Difference]: Without dead ends: 790 [2022-12-14 13:05:24,664 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 13:05:24,665 INFO L413 NwaCegarLoop]: 521 mSDtfsCounter, 54 mSDsluCounter, 1001 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 1522 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 13:05:24,665 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 1522 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 13:05:24,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 790 states. [2022-12-14 13:05:24,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 790 to 756. [2022-12-14 13:05:24,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 756 states, 504 states have (on average 1.5297619047619047) internal successors, (771), 533 states have internal predecessors, (771), 198 states have call successors, (198), 56 states have call predecessors, (198), 53 states have return successors, (210), 190 states have call predecessors, (210), 195 states have call successors, (210) [2022-12-14 13:05:24,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 756 states to 756 states and 1179 transitions. [2022-12-14 13:05:24,698 INFO L78 Accepts]: Start accepts. Automaton has 756 states and 1179 transitions. Word has length 108 [2022-12-14 13:05:24,698 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:05:24,698 INFO L495 AbstractCegarLoop]: Abstraction has 756 states and 1179 transitions. [2022-12-14 13:05:24,698 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (15), 2 states have call predecessors, (15), 2 states have call successors, (15) [2022-12-14 13:05:24,699 INFO L276 IsEmpty]: Start isEmpty. Operand 756 states and 1179 transitions. [2022-12-14 13:05:24,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2022-12-14 13:05:24,701 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:24,701 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:24,701 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 13:05:24,701 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:24,702 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:24,702 INFO L85 PathProgramCache]: Analyzing trace with hash -673459247, now seen corresponding path program 1 times [2022-12-14 13:05:24,702 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:24,702 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1847718877] [2022-12-14 13:05:24,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:24,703 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:24,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:24,853 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 4 proven. 16 refuted. 0 times theorem prover too weak. 65 trivial. 0 not checked. [2022-12-14 13:05:24,854 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:24,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1847718877] [2022-12-14 13:05:24,854 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1847718877] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:05:24,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [302044719] [2022-12-14 13:05:24,854 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:24,854 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:05:24,855 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:05:24,856 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:05:24,857 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 13:05:25,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:25,077 INFO L263 TraceCheckSpWp]: Trace formula consists of 1274 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 13:05:25,086 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:05:25,143 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-12-14 13:05:25,144 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 13:05:25,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [302044719] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:05:25,144 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 13:05:25,144 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [5] total 7 [2022-12-14 13:05:25,144 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [24917840] [2022-12-14 13:05:25,144 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:05:25,145 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 13:05:25,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:05:25,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 13:05:25,146 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-12-14 13:05:25,146 INFO L87 Difference]: Start difference. First operand 756 states and 1179 transitions. Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-12-14 13:05:25,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:05:25,414 INFO L93 Difference]: Finished difference Result 1578 states and 2508 transitions. [2022-12-14 13:05:25,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 13:05:25,415 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 111 [2022-12-14 13:05:25,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:05:25,421 INFO L225 Difference]: With dead ends: 1578 [2022-12-14 13:05:25,421 INFO L226 Difference]: Without dead ends: 834 [2022-12-14 13:05:25,426 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-12-14 13:05:25,427 INFO L413 NwaCegarLoop]: 440 mSDtfsCounter, 213 mSDsluCounter, 856 mSDsCounter, 0 mSdLazyCounter, 239 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 213 SdHoareTripleChecker+Valid, 1296 SdHoareTripleChecker+Invalid, 248 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 239 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 13:05:25,428 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [213 Valid, 1296 Invalid, 248 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 239 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 13:05:25,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 834 states. [2022-12-14 13:05:25,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 834 to 834. [2022-12-14 13:05:25,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 834 states, 580 states have (on average 1.5810344827586207) internal successors, (917), 609 states have internal predecessors, (917), 198 states have call successors, (198), 58 states have call predecessors, (198), 55 states have return successors, (210), 190 states have call predecessors, (210), 195 states have call successors, (210) [2022-12-14 13:05:25,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 834 states to 834 states and 1325 transitions. [2022-12-14 13:05:25,478 INFO L78 Accepts]: Start accepts. Automaton has 834 states and 1325 transitions. Word has length 111 [2022-12-14 13:05:25,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:05:25,478 INFO L495 AbstractCegarLoop]: Abstraction has 834 states and 1325 transitions. [2022-12-14 13:05:25,478 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-12-14 13:05:25,479 INFO L276 IsEmpty]: Start isEmpty. Operand 834 states and 1325 transitions. [2022-12-14 13:05:25,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-12-14 13:05:25,482 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:25,482 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:25,491 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 13:05:25,683 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:05:25,683 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:25,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:25,684 INFO L85 PathProgramCache]: Analyzing trace with hash 1282781446, now seen corresponding path program 1 times [2022-12-14 13:05:25,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:25,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1037151282] [2022-12-14 13:05:25,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:25,684 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:25,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:25,821 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 9 proven. 15 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2022-12-14 13:05:25,821 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:25,821 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1037151282] [2022-12-14 13:05:25,821 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1037151282] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:05:25,821 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1713719478] [2022-12-14 13:05:25,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:25,822 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:05:25,822 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:05:25,823 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:05:25,824 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 13:05:26,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:26,068 INFO L263 TraceCheckSpWp]: Trace formula consists of 1279 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 13:05:26,074 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:05:26,098 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-12-14 13:05:26,098 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 13:05:26,098 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1713719478] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:05:26,098 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 13:05:26,098 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 6 [2022-12-14 13:05:26,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1039150851] [2022-12-14 13:05:26,098 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:05:26,099 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 13:05:26,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:05:26,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 13:05:26,099 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-12-14 13:05:26,100 INFO L87 Difference]: Start difference. First operand 834 states and 1325 transitions. Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-12-14 13:05:26,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:05:26,343 INFO L93 Difference]: Finished difference Result 1734 states and 2798 transitions. [2022-12-14 13:05:26,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 13:05:26,343 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 116 [2022-12-14 13:05:26,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:05:26,349 INFO L225 Difference]: With dead ends: 1734 [2022-12-14 13:05:26,349 INFO L226 Difference]: Without dead ends: 912 [2022-12-14 13:05:26,354 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-14 13:05:26,355 INFO L413 NwaCegarLoop]: 440 mSDtfsCounter, 211 mSDsluCounter, 856 mSDsCounter, 0 mSdLazyCounter, 233 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 211 SdHoareTripleChecker+Valid, 1296 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 233 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 13:05:26,355 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [211 Valid, 1296 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 233 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 13:05:26,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 912 states. [2022-12-14 13:05:26,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 912 to 912. [2022-12-14 13:05:26,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 912 states, 656 states have (on average 1.6204268292682926) internal successors, (1063), 685 states have internal predecessors, (1063), 198 states have call successors, (198), 60 states have call predecessors, (198), 57 states have return successors, (210), 190 states have call predecessors, (210), 195 states have call successors, (210) [2022-12-14 13:05:26,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 912 states to 912 states and 1471 transitions. [2022-12-14 13:05:26,404 INFO L78 Accepts]: Start accepts. Automaton has 912 states and 1471 transitions. Word has length 116 [2022-12-14 13:05:26,404 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:05:26,404 INFO L495 AbstractCegarLoop]: Abstraction has 912 states and 1471 transitions. [2022-12-14 13:05:26,404 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-12-14 13:05:26,404 INFO L276 IsEmpty]: Start isEmpty. Operand 912 states and 1471 transitions. [2022-12-14 13:05:26,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2022-12-14 13:05:26,408 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:26,408 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 4, 4, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:26,414 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-12-14 13:05:26,609 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:05:26,610 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:26,611 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:26,612 INFO L85 PathProgramCache]: Analyzing trace with hash -346293898, now seen corresponding path program 1 times [2022-12-14 13:05:26,612 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:26,613 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1026241169] [2022-12-14 13:05:26,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:26,614 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:26,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:26,825 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 15 proven. 12 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2022-12-14 13:05:26,825 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:26,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1026241169] [2022-12-14 13:05:26,825 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1026241169] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:05:26,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1670103085] [2022-12-14 13:05:26,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:26,826 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:05:26,826 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:05:26,827 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:05:26,828 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 13:05:27,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:27,056 INFO L263 TraceCheckSpWp]: Trace formula consists of 1283 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 13:05:27,060 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:05:27,083 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 73 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-12-14 13:05:27,084 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 13:05:27,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1670103085] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:05:27,084 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 13:05:27,084 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 6 [2022-12-14 13:05:27,084 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [748639096] [2022-12-14 13:05:27,084 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:05:27,085 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 13:05:27,085 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:05:27,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 13:05:27,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-12-14 13:05:27,086 INFO L87 Difference]: Start difference. First operand 912 states and 1471 transitions. Second operand has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-12-14 13:05:27,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:05:27,301 INFO L93 Difference]: Finished difference Result 1890 states and 3088 transitions. [2022-12-14 13:05:27,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 13:05:27,302 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 120 [2022-12-14 13:05:27,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:05:27,308 INFO L225 Difference]: With dead ends: 1890 [2022-12-14 13:05:27,308 INFO L226 Difference]: Without dead ends: 990 [2022-12-14 13:05:27,312 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-14 13:05:27,313 INFO L413 NwaCegarLoop]: 440 mSDtfsCounter, 209 mSDsluCounter, 856 mSDsCounter, 0 mSdLazyCounter, 227 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 1296 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 227 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 13:05:27,313 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 1296 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 227 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 13:05:27,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 990 states. [2022-12-14 13:05:27,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 990 to 990. [2022-12-14 13:05:27,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 990 states, 732 states have (on average 1.651639344262295) internal successors, (1209), 761 states have internal predecessors, (1209), 198 states have call successors, (198), 62 states have call predecessors, (198), 59 states have return successors, (210), 190 states have call predecessors, (210), 195 states have call successors, (210) [2022-12-14 13:05:27,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 990 states to 990 states and 1617 transitions. [2022-12-14 13:05:27,351 INFO L78 Accepts]: Start accepts. Automaton has 990 states and 1617 transitions. Word has length 120 [2022-12-14 13:05:27,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:05:27,351 INFO L495 AbstractCegarLoop]: Abstraction has 990 states and 1617 transitions. [2022-12-14 13:05:27,351 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-12-14 13:05:27,352 INFO L276 IsEmpty]: Start isEmpty. Operand 990 states and 1617 transitions. [2022-12-14 13:05:27,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2022-12-14 13:05:27,354 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:27,354 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:27,362 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 13:05:27,555 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:05:27,555 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:27,555 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:27,555 INFO L85 PathProgramCache]: Analyzing trace with hash 869103601, now seen corresponding path program 1 times [2022-12-14 13:05:27,555 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:27,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1616954475] [2022-12-14 13:05:27,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:27,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:27,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:27,698 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-12-14 13:05:27,699 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:27,699 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1616954475] [2022-12-14 13:05:27,699 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1616954475] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:05:27,699 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1351257079] [2022-12-14 13:05:27,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:27,699 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:05:27,699 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:05:27,700 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:05:27,701 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 13:05:27,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:27,916 INFO L263 TraceCheckSpWp]: Trace formula consists of 1286 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 13:05:27,919 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:05:27,941 INFO L134 CoverageAnalysis]: Checked inductivity of 104 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-12-14 13:05:27,942 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 13:05:27,942 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1351257079] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:05:27,942 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 13:05:27,942 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 6 [2022-12-14 13:05:27,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [392712225] [2022-12-14 13:05:27,942 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:05:27,943 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 13:05:27,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:05:27,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 13:05:27,943 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-12-14 13:05:27,944 INFO L87 Difference]: Start difference. First operand 990 states and 1617 transitions. Second operand has 4 states, 4 states have (on average 18.75) internal successors, (75), 4 states have internal predecessors, (75), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-12-14 13:05:28,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:05:28,167 INFO L93 Difference]: Finished difference Result 2046 states and 3378 transitions. [2022-12-14 13:05:28,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 13:05:28,167 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 18.75) internal successors, (75), 4 states have internal predecessors, (75), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 123 [2022-12-14 13:05:28,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:05:28,174 INFO L225 Difference]: With dead ends: 2046 [2022-12-14 13:05:28,174 INFO L226 Difference]: Without dead ends: 1068 [2022-12-14 13:05:28,179 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-14 13:05:28,180 INFO L413 NwaCegarLoop]: 440 mSDtfsCounter, 207 mSDsluCounter, 856 mSDsCounter, 0 mSdLazyCounter, 221 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 1296 SdHoareTripleChecker+Invalid, 245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 221 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 13:05:28,180 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 1296 Invalid, 245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 221 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 13:05:28,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1068 states. [2022-12-14 13:05:28,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1068 to 1068. [2022-12-14 13:05:28,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1068 states, 808 states have (on average 1.676980198019802) internal successors, (1355), 837 states have internal predecessors, (1355), 198 states have call successors, (198), 64 states have call predecessors, (198), 61 states have return successors, (210), 190 states have call predecessors, (210), 195 states have call successors, (210) [2022-12-14 13:05:28,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1068 states to 1068 states and 1763 transitions. [2022-12-14 13:05:28,222 INFO L78 Accepts]: Start accepts. Automaton has 1068 states and 1763 transitions. Word has length 123 [2022-12-14 13:05:28,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:05:28,222 INFO L495 AbstractCegarLoop]: Abstraction has 1068 states and 1763 transitions. [2022-12-14 13:05:28,222 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 18.75) internal successors, (75), 4 states have internal predecessors, (75), 2 states have call successors, (18), 2 states have call predecessors, (18), 3 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2022-12-14 13:05:28,222 INFO L276 IsEmpty]: Start isEmpty. Operand 1068 states and 1763 transitions. [2022-12-14 13:05:28,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-12-14 13:05:28,225 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:28,225 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 4, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:28,232 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 13:05:28,425 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:05:28,426 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:28,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:28,426 INFO L85 PathProgramCache]: Analyzing trace with hash 1005568289, now seen corresponding path program 1 times [2022-12-14 13:05:28,426 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:28,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1963828180] [2022-12-14 13:05:28,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:28,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:28,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:28,515 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-12-14 13:05:28,515 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:28,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1963828180] [2022-12-14 13:05:28,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1963828180] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:05:28,515 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 13:05:28,515 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 13:05:28,516 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1473880397] [2022-12-14 13:05:28,516 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:05:28,516 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 13:05:28,516 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:05:28,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 13:05:28,517 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 13:05:28,517 INFO L87 Difference]: Start difference. First operand 1068 states and 1763 transitions. Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (17), 1 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-12-14 13:05:28,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:05:28,757 INFO L93 Difference]: Finished difference Result 2208 states and 3666 transitions. [2022-12-14 13:05:28,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 13:05:28,757 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (17), 1 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 125 [2022-12-14 13:05:28,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:05:28,763 INFO L225 Difference]: With dead ends: 2208 [2022-12-14 13:05:28,763 INFO L226 Difference]: Without dead ends: 1136 [2022-12-14 13:05:28,767 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 13:05:28,767 INFO L413 NwaCegarLoop]: 453 mSDtfsCounter, 99 mSDsluCounter, 856 mSDsCounter, 0 mSdLazyCounter, 264 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 1309 SdHoareTripleChecker+Invalid, 298 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 13:05:28,767 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 1309 Invalid, 298 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 264 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 13:05:28,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1136 states. [2022-12-14 13:05:28,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1136 to 1136. [2022-12-14 13:05:28,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1136 states, 874 states have (on average 1.591533180778032) internal successors, (1391), 903 states have internal predecessors, (1391), 198 states have call successors, (198), 66 states have call predecessors, (198), 63 states have return successors, (210), 190 states have call predecessors, (210), 195 states have call successors, (210) [2022-12-14 13:05:28,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1136 states to 1136 states and 1799 transitions. [2022-12-14 13:05:28,808 INFO L78 Accepts]: Start accepts. Automaton has 1136 states and 1799 transitions. Word has length 125 [2022-12-14 13:05:28,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:05:28,808 INFO L495 AbstractCegarLoop]: Abstraction has 1136 states and 1799 transitions. [2022-12-14 13:05:28,808 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (17), 1 states have call predecessors, (17), 2 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2022-12-14 13:05:28,808 INFO L276 IsEmpty]: Start isEmpty. Operand 1136 states and 1799 transitions. [2022-12-14 13:05:28,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-12-14 13:05:28,810 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:28,811 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:28,811 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-14 13:05:28,811 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:28,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:28,811 INFO L85 PathProgramCache]: Analyzing trace with hash -517088176, now seen corresponding path program 1 times [2022-12-14 13:05:28,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:28,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167308289] [2022-12-14 13:05:28,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:28,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:28,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:28,946 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2022-12-14 13:05:28,946 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:28,946 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167308289] [2022-12-14 13:05:28,947 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1167308289] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:05:28,947 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 13:05:28,947 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 13:05:28,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [482827295] [2022-12-14 13:05:28,947 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:05:28,947 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 13:05:28,948 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:05:28,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 13:05:28,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 13:05:28,948 INFO L87 Difference]: Start difference. First operand 1136 states and 1799 transitions. Second operand has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 4 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) [2022-12-14 13:05:29,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:05:29,375 INFO L93 Difference]: Finished difference Result 2331 states and 3678 transitions. [2022-12-14 13:05:29,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 13:05:29,376 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 4 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) Word has length 125 [2022-12-14 13:05:29,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:05:29,381 INFO L225 Difference]: With dead ends: 2331 [2022-12-14 13:05:29,381 INFO L226 Difference]: Without dead ends: 1024 [2022-12-14 13:05:29,386 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2022-12-14 13:05:29,387 INFO L413 NwaCegarLoop]: 574 mSDtfsCounter, 659 mSDsluCounter, 2000 mSDsCounter, 0 mSdLazyCounter, 549 mSolverCounterSat, 88 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 659 SdHoareTripleChecker+Valid, 2574 SdHoareTripleChecker+Invalid, 637 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 88 IncrementalHoareTripleChecker+Valid, 549 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 13:05:29,387 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [659 Valid, 2574 Invalid, 637 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [88 Valid, 549 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 13:05:29,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1024 states. [2022-12-14 13:05:29,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1024 to 1002. [2022-12-14 13:05:29,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1002 states, 724 states have (on average 1.5) internal successors, (1086), 755 states have internal predecessors, (1086), 207 states have call successors, (207), 74 states have call predecessors, (207), 70 states have return successors, (224), 196 states have call predecessors, (224), 204 states have call successors, (224) [2022-12-14 13:05:29,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1002 states to 1002 states and 1517 transitions. [2022-12-14 13:05:29,430 INFO L78 Accepts]: Start accepts. Automaton has 1002 states and 1517 transitions. Word has length 125 [2022-12-14 13:05:29,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:05:29,430 INFO L495 AbstractCegarLoop]: Abstraction has 1002 states and 1517 transitions. [2022-12-14 13:05:29,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 4 states have call successors, (17), 2 states have call predecessors, (17), 2 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) [2022-12-14 13:05:29,430 INFO L276 IsEmpty]: Start isEmpty. Operand 1002 states and 1517 transitions. [2022-12-14 13:05:29,432 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 127 [2022-12-14 13:05:29,432 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:05:29,432 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 4, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:05:29,432 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-14 13:05:29,432 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:05:29,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:05:29,433 INFO L85 PathProgramCache]: Analyzing trace with hash -1144057946, now seen corresponding path program 1 times [2022-12-14 13:05:29,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:05:29,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [296803467] [2022-12-14 13:05:29,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:29,433 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:05:29,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:30,344 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 23 proven. 9 refuted. 0 times theorem prover too weak. 73 trivial. 0 not checked. [2022-12-14 13:05:30,345 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:05:30,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [296803467] [2022-12-14 13:05:30,345 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [296803467] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:05:30,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [524116164] [2022-12-14 13:05:30,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:05:30,345 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:05:30,345 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:05:30,346 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:05:30,347 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 13:05:30,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:05:30,553 INFO L263 TraceCheckSpWp]: Trace formula consists of 1289 conjuncts, 40 conjunts are in the unsatisfiable core [2022-12-14 13:05:30,558 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:05:31,380 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2022-12-14 13:05:31,380 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 13:05:59,030 WARN L233 SmtUtils]: Spent 25.59s on a formula simplification. DAG size of input: 1441 DAG size of output: 51 (called from [L 278] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.cfg.transitions.TransFormulaUtils.sequentialComposition) [2022-12-14 13:06:00,671 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-12-14 13:06:00,671 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [524116164] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 13:06:00,671 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1823586639] [2022-12-14 13:06:00,686 INFO L159 IcfgInterpreter]: Started Sifa with 84 locations of interest [2022-12-14 13:06:00,687 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 13:06:00,689 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 13:06:00,693 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 13:06:00,693 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 13:06:02,480 INFO L197 IcfgInterpreter]: Interpreting procedure bigMacCall with input of size 569 for LOIs [2022-12-14 13:06:05,541 INFO L197 IcfgInterpreter]: Interpreting procedure initPersonOnFloor with input of size 573 for LOIs [2022-12-14 13:06:06,087 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 564 for LOIs [2022-12-14 13:06:13,423 INFO L197 IcfgInterpreter]: Interpreting procedure getCurrentFloorID with input of size 60 for LOIs [2022-12-14 13:06:13,426 INFO L197 IcfgInterpreter]: Interpreting procedure isExecutiveFloorCalling with input of size 96 for LOIs [2022-12-14 13:06:13,600 INFO L197 IcfgInterpreter]: Interpreting procedure isPersonOnFloor with input of size 97 for LOIs [2022-12-14 13:06:13,904 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedAtCurrentFloor__wrappee__empty with input of size 433 for LOIs [2022-12-14 13:06:14,556 INFO L197 IcfgInterpreter]: Interpreting procedure isFloorCalling with input of size 60 for LOIs [2022-12-14 13:06:14,569 INFO L197 IcfgInterpreter]: Interpreting procedure getOrigin with input of size 501 for LOIs [2022-12-14 13:06:14,698 INFO L197 IcfgInterpreter]: Interpreting procedure resetCallOnFloor with input of size 76 for LOIs [2022-12-14 13:06:14,714 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 13:07:16,909 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '34063#(and (<= 0 |timeShift_processWaitingOnFloor_#in~floorID#1|) (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0) (= |old(~floorButtons_2~0)| 0) (<= ~floorButtons_3~0 0) (= ~executiveFloor~0 4) (= |old(~persons_1~0)| 0) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| ~doorState~0) (<= ~currentHeading~0 1) (= |old(~persons_5~0)| 0) (= |old(~doorState~0)| 1) (= |old(~persons_2~0)| 0) (= |timeShift_processWaitingOnFloor_~tmp___6~1#1| 0) (= ~persons_5~0 0) (= |old(~persons_4~0)| 0) (<= ~personOnFloor_5_1~0 1) (= |old(~floorButtons_0~0)| 0) (<= 0 |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1|) (<= ~floorButtons_0~0 0) (<= 0 ~floorButtons_1~0) (= |timeShift_isExecutiveFloor_~floorID#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= 0 ~floorButtons_2~0) (<= |timeShift_resetFloorButton_#in~floorID#1| 0) (<= ~calls_0~0 0) (= ~head~0.offset 0) (<= 0 |timeShift_resetFloorButton_#in~floorID#1|) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| |timeShift_isExecutiveFloor_#res#1|) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1|)) (= ~persons_4~0 0) (<= |timeShift_processWaitingOnFloor_#in~floorID#1| 0) (<= 0 ~floorButtons_3~0) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| (ite (= ~executiveFloor~0 |timeShift_isExecutiveFloor_~floorID#1|) 1 0)) (<= 0 |timeShift_~tmp___9~2#1|) (= |timeShift_areDoorsOpen_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|) (= ~currentFloorID~0 |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1|) (<= 0 |timeShift_processWaitingOnFloor_~floorID#1|) (= |timeShift_processWaitingOnFloor_~tmp___0~10#1| 0) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 0) (<= 0 |timeShift_resetFloorButton_~floorID#1|) (<= ~floorButtons_2~0 0) (= ~persons_3~0 0) (= |old(~floorButtons_4~0)| 0) (= |old(~persons_0~0)| 0) (<= 0 ~floorButtons_0~0) (= ~doorState~0 1) (= |timeShift_processWaitingOnFloor_~tmp___10~0#1| 0) (= |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1| 0) (<= 1 ~currentHeading~0) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 2147483647) (<= 0 ~calls_0~0) (= |old(~persons_3~0)| 0) (= ~persons_1~0 0) (= ~persons_0~0 0) (= |old(~floorButtons_3~0)| 0) (= ~head~0.base 0) (<= 0 |timeShift_stopRequestedAtCurrentFloor_#res#1|) (<= 1 ~personOnFloor_5_1~0) (= |#NULL.offset| 0) (<= ~floorButtons_4~0 0) (<= |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1| 1) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| |timeShift_areDoorsOpen_#res#1|) (<= |timeShift_~tmp___9~2#1| 1) (= |old(~currentHeading~0)| 1) (= |timeShift_processWaitingOnFloor_~tmp___8~1#1| 0) (= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_resetFloorButton_~floorID#1| 0) (= |old(~personOnFloor_5_1~0)| 1) (= 1 |old(~calls_1~0)|) (<= |timeShift_stopRequestedAtCurrentFloor_#res#1| 1) (<= 0 ~floorButtons_4~0) (<= 0 |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1|) (= |old(~floorButtons_1~0)| 0) (= |old(~currentFloorID~0)| 0) (<= 0 |#StackHeapBarrier|) (<= ~floorButtons_1~0 0) (<= |timeShift_processWaitingOnFloor_~floorID#1| 0) (= |timeShift_processWaitingOnFloor_~tmp___2~4#1| 0) (= ~cleanupTimeShifts~0 12) (= |timeShift_processWaitingOnFloor_~tmp___4~1#1| 0) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 0)) (= |#NULL.base| 0) (= ~persons_2~0 0))' at error location [2022-12-14 13:07:16,909 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 13:07:16,909 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 13:07:16,909 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 15, 16] total 43 [2022-12-14 13:07:16,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1798100560] [2022-12-14 13:07:16,909 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 13:07:16,910 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-12-14 13:07:16,910 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:07:16,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-12-14 13:07:16,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=966, Invalid=9336, Unknown=0, NotChecked=0, Total=10302 [2022-12-14 13:07:16,912 INFO L87 Difference]: Start difference. First operand 1002 states and 1517 transitions. Second operand has 43 states, 31 states have (on average 5.290322580645161) internal successors, (164), 32 states have internal predecessors, (164), 10 states have call successors, (47), 9 states have call predecessors, (47), 18 states have return successors, (46), 19 states have call predecessors, (46), 10 states have call successors, (46) [2022-12-14 13:07:27,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:07:27,030 INFO L93 Difference]: Finished difference Result 3199 states and 4926 transitions. [2022-12-14 13:07:27,031 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 75 states. [2022-12-14 13:07:27,031 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 31 states have (on average 5.290322580645161) internal successors, (164), 32 states have internal predecessors, (164), 10 states have call successors, (47), 9 states have call predecessors, (47), 18 states have return successors, (46), 19 states have call predecessors, (46), 10 states have call successors, (46) Word has length 126 [2022-12-14 13:07:27,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:07:27,037 INFO L225 Difference]: With dead ends: 3199 [2022-12-14 13:07:27,038 INFO L226 Difference]: Without dead ends: 1772 [2022-12-14 13:07:27,046 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 485 GetRequests, 303 SyntacticMatches, 15 SemanticMatches, 167 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11255 ImplicationChecksByTransitivity, 65.3s TimeCoverageRelationStatistics Valid=2568, Invalid=25824, Unknown=0, NotChecked=0, Total=28392 [2022-12-14 13:07:27,046 INFO L413 NwaCegarLoop]: 318 mSDtfsCounter, 3329 mSDsluCounter, 4073 mSDsCounter, 0 mSdLazyCounter, 19450 mSolverCounterSat, 2296 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3377 SdHoareTripleChecker+Valid, 4391 SdHoareTripleChecker+Invalid, 21746 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2296 IncrementalHoareTripleChecker+Valid, 19450 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.5s IncrementalHoareTripleChecker+Time [2022-12-14 13:07:27,047 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3377 Valid, 4391 Invalid, 21746 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2296 Valid, 19450 Invalid, 0 Unknown, 0 Unchecked, 7.5s Time] [2022-12-14 13:07:27,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1772 states. [2022-12-14 13:07:27,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1772 to 1647. [2022-12-14 13:07:27,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1647 states, 1156 states have (on average 1.4065743944636677) internal successors, (1626), 1218 states have internal predecessors, (1626), 364 states have call successors, (364), 132 states have call predecessors, (364), 126 states have return successors, (406), 344 states have call predecessors, (406), 361 states have call successors, (406) [2022-12-14 13:07:27,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1647 states to 1647 states and 2396 transitions. [2022-12-14 13:07:27,128 INFO L78 Accepts]: Start accepts. Automaton has 1647 states and 2396 transitions. Word has length 126 [2022-12-14 13:07:27,129 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:07:27,129 INFO L495 AbstractCegarLoop]: Abstraction has 1647 states and 2396 transitions. [2022-12-14 13:07:27,129 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 31 states have (on average 5.290322580645161) internal successors, (164), 32 states have internal predecessors, (164), 10 states have call successors, (47), 9 states have call predecessors, (47), 18 states have return successors, (46), 19 states have call predecessors, (46), 10 states have call successors, (46) [2022-12-14 13:07:27,129 INFO L276 IsEmpty]: Start isEmpty. Operand 1647 states and 2396 transitions. [2022-12-14 13:07:27,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2022-12-14 13:07:27,132 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:07:27,133 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 4, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:07:27,140 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-12-14 13:07:27,333 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-14 13:07:27,333 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:07:27,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:07:27,334 INFO L85 PathProgramCache]: Analyzing trace with hash -1411220871, now seen corresponding path program 1 times [2022-12-14 13:07:27,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:07:27,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [71231840] [2022-12-14 13:07:27,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:07:27,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:07:27,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:07:27,476 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2022-12-14 13:07:27,476 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:07:27,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [71231840] [2022-12-14 13:07:27,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [71231840] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:07:27,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1377277616] [2022-12-14 13:07:27,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:07:27,476 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:07:27,476 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:07:27,477 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:07:27,478 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 13:07:27,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:07:27,660 INFO L263 TraceCheckSpWp]: Trace formula consists of 1303 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-14 13:07:27,665 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:07:27,735 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2022-12-14 13:07:27,735 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 13:07:27,735 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1377277616] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:07:27,735 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 13:07:27,735 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 10 [2022-12-14 13:07:27,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [562940219] [2022-12-14 13:07:27,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:07:27,736 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 13:07:27,736 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:07:27,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 13:07:27,736 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=68, Unknown=0, NotChecked=0, Total=90 [2022-12-14 13:07:27,736 INFO L87 Difference]: Start difference. First operand 1647 states and 2396 transitions. Second operand has 6 states, 5 states have (on average 13.6) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-12-14 13:07:28,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:07:28,280 INFO L93 Difference]: Finished difference Result 3114 states and 4525 transitions. [2022-12-14 13:07:28,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 13:07:28,281 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 13.6) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 131 [2022-12-14 13:07:28,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:07:28,286 INFO L225 Difference]: With dead ends: 3114 [2022-12-14 13:07:28,286 INFO L226 Difference]: Without dead ends: 1480 [2022-12-14 13:07:28,290 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2022-12-14 13:07:28,291 INFO L413 NwaCegarLoop]: 574 mSDtfsCounter, 333 mSDsluCounter, 1651 mSDsCounter, 0 mSdLazyCounter, 853 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 337 SdHoareTripleChecker+Valid, 2225 SdHoareTripleChecker+Invalid, 867 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 853 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 13:07:28,291 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [337 Valid, 2225 Invalid, 867 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 853 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 13:07:28,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1480 states. [2022-12-14 13:07:28,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1480 to 1456. [2022-12-14 13:07:28,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1456 states, 1041 states have (on average 1.4159462055715657) internal successors, (1474), 1087 states have internal predecessors, (1474), 303 states have call successors, (303), 116 states have call predecessors, (303), 111 states have return successors, (332), 288 states have call predecessors, (332), 300 states have call successors, (332) [2022-12-14 13:07:28,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1456 states to 1456 states and 2109 transitions. [2022-12-14 13:07:28,355 INFO L78 Accepts]: Start accepts. Automaton has 1456 states and 2109 transitions. Word has length 131 [2022-12-14 13:07:28,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:07:28,355 INFO L495 AbstractCegarLoop]: Abstraction has 1456 states and 2109 transitions. [2022-12-14 13:07:28,356 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 13.6) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2022-12-14 13:07:28,356 INFO L276 IsEmpty]: Start isEmpty. Operand 1456 states and 2109 transitions. [2022-12-14 13:07:28,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2022-12-14 13:07:28,360 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:07:28,361 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:07:28,367 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-12-14 13:07:28,561 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-12-14 13:07:28,561 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:07:28,561 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:07:28,562 INFO L85 PathProgramCache]: Analyzing trace with hash 774672352, now seen corresponding path program 1 times [2022-12-14 13:07:28,562 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:07:28,562 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [647836933] [2022-12-14 13:07:28,562 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:07:28,562 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:07:28,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:07:29,028 INFO L134 CoverageAnalysis]: Checked inductivity of 175 backedges. 8 proven. 8 refuted. 0 times theorem prover too weak. 159 trivial. 0 not checked. [2022-12-14 13:07:29,028 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:07:29,029 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [647836933] [2022-12-14 13:07:29,029 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [647836933] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:07:29,029 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1065149886] [2022-12-14 13:07:29,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:07:29,029 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:07:29,029 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:07:29,030 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:07:29,031 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 13:07:29,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:07:29,280 INFO L263 TraceCheckSpWp]: Trace formula consists of 1682 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-14 13:07:29,283 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:07:29,431 INFO L134 CoverageAnalysis]: Checked inductivity of 175 backedges. 64 proven. 10 refuted. 0 times theorem prover too weak. 101 trivial. 0 not checked. [2022-12-14 13:07:29,432 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 13:07:29,648 INFO L134 CoverageAnalysis]: Checked inductivity of 175 backedges. 15 proven. 20 refuted. 0 times theorem prover too weak. 140 trivial. 0 not checked. [2022-12-14 13:07:29,649 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1065149886] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 13:07:29,649 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1402413382] [2022-12-14 13:07:29,653 INFO L159 IcfgInterpreter]: Started Sifa with 114 locations of interest [2022-12-14 13:07:29,653 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 13:07:29,653 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 13:07:29,653 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 13:07:29,653 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 13:07:33,618 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 647 for LOIs [2022-12-14 13:07:40,892 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedInDirection with input of size 35 for LOIs [2022-12-14 13:07:40,949 INFO L197 IcfgInterpreter]: Interpreting procedure isExecutiveFloorCalling with input of size 46 for LOIs [2022-12-14 13:07:41,004 INFO L197 IcfgInterpreter]: Interpreting procedure isPersonOnFloor with input of size 82 for LOIs [2022-12-14 13:07:41,399 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedAtCurrentFloor__wrappee__empty with input of size 25 for LOIs [2022-12-14 13:07:41,440 INFO L197 IcfgInterpreter]: Interpreting procedure isFloorCalling with input of size 21 for LOIs [2022-12-14 13:07:41,447 INFO L197 IcfgInterpreter]: Interpreting procedure resetCallOnFloor with input of size 70 for LOIs [2022-12-14 13:07:41,459 INFO L197 IcfgInterpreter]: Interpreting procedure getCurrentFloorID with input of size 46 for LOIs [2022-12-14 13:07:41,464 INFO L197 IcfgInterpreter]: Interpreting procedure bigMacCall with input of size 569 for LOIs [2022-12-14 13:07:44,760 INFO L197 IcfgInterpreter]: Interpreting procedure initPersonOnFloor with input of size 573 for LOIs [2022-12-14 13:07:45,294 INFO L197 IcfgInterpreter]: Interpreting procedure continueInDirection with input of size 45 for LOIs [2022-12-14 13:07:45,326 INFO L197 IcfgInterpreter]: Interpreting procedure isTopFloor with input of size 41 for LOIs [2022-12-14 13:07:45,328 INFO L197 IcfgInterpreter]: Interpreting procedure getOrigin with input of size 501 for LOIs [2022-12-14 13:07:45,459 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 13:08:40,987 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '48614#(and (<= 0 (+ |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 2147483648)) (= |timeShift_isExecutiveFloor_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1|) (= ~executiveFloor~0 4) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| ~doorState~0) (<= 0 (+ |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483648)) (<= 0 (+ |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483648)) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483647) (<= 0 |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1|) (= |timeShift_isExecutiveFloor_~floorID#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483647) (= ~head~0.offset 0) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 0)) (<= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 2147483647) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| |timeShift_isExecutiveFloor_#res#1|) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1|)) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| (ite (= ~executiveFloor~0 |timeShift_isExecutiveFloor_~floorID#1|) 1 0)) (<= 0 |timeShift_~tmp___9~2#1|) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 2147483647) (= |timeShift_areDoorsOpen_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|) (= ~currentFloorID~0 |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1|) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|)) (= |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1| 0) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 2147483647) (= ~head~0.base 0) (<= 0 |timeShift_stopRequestedAtCurrentFloor_#res#1|) (= |#NULL.offset| 0) (<= |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1| 1) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| |timeShift_areDoorsOpen_#res#1|) (<= |timeShift_~tmp___9~2#1| 1) (= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_#res#1| 1) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 12) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 0)) (= |#NULL.base| 0))' at error location [2022-12-14 13:08:40,987 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 13:08:40,987 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 13:08:40,987 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 10] total 26 [2022-12-14 13:08:40,987 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [378933100] [2022-12-14 13:08:40,987 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 13:08:40,988 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-12-14 13:08:40,988 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:08:40,988 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-12-14 13:08:40,990 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1072, Invalid=13690, Unknown=0, NotChecked=0, Total=14762 [2022-12-14 13:08:40,991 INFO L87 Difference]: Start difference. First operand 1456 states and 2109 transitions. Second operand has 26 states, 20 states have (on average 10.35) internal successors, (207), 22 states have internal predecessors, (207), 14 states have call successors, (66), 8 states have call predecessors, (66), 9 states have return successors, (64), 15 states have call predecessors, (64), 13 states have call successors, (64) [2022-12-14 13:08:51,483 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:08:51,483 INFO L93 Difference]: Finished difference Result 5397 states and 8118 transitions. [2022-12-14 13:08:51,484 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-12-14 13:08:51,484 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 20 states have (on average 10.35) internal successors, (207), 22 states have internal predecessors, (207), 14 states have call successors, (66), 8 states have call predecessors, (66), 9 states have return successors, (64), 15 states have call predecessors, (64), 13 states have call successors, (64) Word has length 188 [2022-12-14 13:08:51,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:08:51,497 INFO L225 Difference]: With dead ends: 5397 [2022-12-14 13:08:51,497 INFO L226 Difference]: Without dead ends: 3954 [2022-12-14 13:08:51,507 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 674 GetRequests, 486 SyntacticMatches, 8 SemanticMatches, 180 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13419 ImplicationChecksByTransitivity, 57.0s TimeCoverageRelationStatistics Valid=2287, Invalid=30655, Unknown=0, NotChecked=0, Total=32942 [2022-12-14 13:08:51,508 INFO L413 NwaCegarLoop]: 570 mSDtfsCounter, 4942 mSDsluCounter, 5680 mSDsCounter, 0 mSdLazyCounter, 20734 mSolverCounterSat, 3905 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4965 SdHoareTripleChecker+Valid, 6250 SdHoareTripleChecker+Invalid, 24639 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3905 IncrementalHoareTripleChecker+Valid, 20734 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.5s IncrementalHoareTripleChecker+Time [2022-12-14 13:08:51,508 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [4965 Valid, 6250 Invalid, 24639 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3905 Valid, 20734 Invalid, 0 Unknown, 0 Unchecked, 8.5s Time] [2022-12-14 13:08:51,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3954 states. [2022-12-14 13:08:51,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3954 to 3614. [2022-12-14 13:08:51,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3614 states, 2626 states have (on average 1.4120335110434121) internal successors, (3708), 2706 states have internal predecessors, (3708), 694 states have call successors, (694), 302 states have call predecessors, (694), 293 states have return successors, (805), 665 states have call predecessors, (805), 686 states have call successors, (805) [2022-12-14 13:08:51,724 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3614 states to 3614 states and 5207 transitions. [2022-12-14 13:08:51,724 INFO L78 Accepts]: Start accepts. Automaton has 3614 states and 5207 transitions. Word has length 188 [2022-12-14 13:08:51,724 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:08:51,724 INFO L495 AbstractCegarLoop]: Abstraction has 3614 states and 5207 transitions. [2022-12-14 13:08:51,724 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 20 states have (on average 10.35) internal successors, (207), 22 states have internal predecessors, (207), 14 states have call successors, (66), 8 states have call predecessors, (66), 9 states have return successors, (64), 15 states have call predecessors, (64), 13 states have call successors, (64) [2022-12-14 13:08:51,725 INFO L276 IsEmpty]: Start isEmpty. Operand 3614 states and 5207 transitions. [2022-12-14 13:08:51,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 256 [2022-12-14 13:08:51,738 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:08:51,738 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 8, 6, 6, 6, 5, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:08:51,746 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-12-14 13:08:51,938 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:08:51,939 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:08:51,939 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:08:51,940 INFO L85 PathProgramCache]: Analyzing trace with hash 491060557, now seen corresponding path program 1 times [2022-12-14 13:08:51,940 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:08:51,940 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1511620401] [2022-12-14 13:08:51,940 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:08:51,940 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:08:51,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:08:52,036 INFO L134 CoverageAnalysis]: Checked inductivity of 348 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 315 trivial. 0 not checked. [2022-12-14 13:08:52,037 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:08:52,037 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1511620401] [2022-12-14 13:08:52,037 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1511620401] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:08:52,037 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 13:08:52,037 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 13:08:52,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [411423874] [2022-12-14 13:08:52,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:08:52,038 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 13:08:52,038 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:08:52,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 13:08:52,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 13:08:52,039 INFO L87 Difference]: Start difference. First operand 3614 states and 5207 transitions. Second operand has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (29), 2 states have call predecessors, (29), 2 states have return successors, (29), 2 states have call predecessors, (29), 2 states have call successors, (29) [2022-12-14 13:08:52,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:08:52,397 INFO L93 Difference]: Finished difference Result 6238 states and 9029 transitions. [2022-12-14 13:08:52,398 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 13:08:52,398 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (29), 2 states have call predecessors, (29), 2 states have return successors, (29), 2 states have call predecessors, (29), 2 states have call successors, (29) Word has length 255 [2022-12-14 13:08:52,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:08:52,409 INFO L225 Difference]: With dead ends: 6238 [2022-12-14 13:08:52,409 INFO L226 Difference]: Without dead ends: 3712 [2022-12-14 13:08:52,417 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 13:08:52,417 INFO L413 NwaCegarLoop]: 566 mSDtfsCounter, 344 mSDsluCounter, 429 mSDsCounter, 0 mSdLazyCounter, 140 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 995 SdHoareTripleChecker+Invalid, 160 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 13:08:52,417 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [344 Valid, 995 Invalid, 160 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 13:08:52,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3712 states. [2022-12-14 13:08:52,696 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3712 to 3690. [2022-12-14 13:08:52,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3690 states, 2676 states have (on average 1.3878923766816142) internal successors, (3714), 2756 states have internal predecessors, (3714), 708 states have call successors, (708), 314 states have call predecessors, (708), 305 states have return successors, (821), 679 states have call predecessors, (821), 700 states have call successors, (821) [2022-12-14 13:08:52,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3690 states to 3690 states and 5243 transitions. [2022-12-14 13:08:52,722 INFO L78 Accepts]: Start accepts. Automaton has 3690 states and 5243 transitions. Word has length 255 [2022-12-14 13:08:52,722 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:08:52,722 INFO L495 AbstractCegarLoop]: Abstraction has 3690 states and 5243 transitions. [2022-12-14 13:08:52,723 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 36.333333333333336) internal successors, (109), 3 states have internal predecessors, (109), 2 states have call successors, (29), 2 states have call predecessors, (29), 2 states have return successors, (29), 2 states have call predecessors, (29), 2 states have call successors, (29) [2022-12-14 13:08:52,723 INFO L276 IsEmpty]: Start isEmpty. Operand 3690 states and 5243 transitions. [2022-12-14 13:08:52,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 247 [2022-12-14 13:08:52,739 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:08:52,739 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 8, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:08:52,739 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-12-14 13:08:52,739 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:08:52,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:08:52,740 INFO L85 PathProgramCache]: Analyzing trace with hash -67607101, now seen corresponding path program 1 times [2022-12-14 13:08:52,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:08:52,740 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1885702340] [2022-12-14 13:08:52,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:08:52,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:08:52,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:08:53,003 INFO L134 CoverageAnalysis]: Checked inductivity of 360 backedges. 30 proven. 24 refuted. 0 times theorem prover too weak. 306 trivial. 0 not checked. [2022-12-14 13:08:53,003 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:08:53,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1885702340] [2022-12-14 13:08:53,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1885702340] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:08:53,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [614060860] [2022-12-14 13:08:53,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:08:53,004 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:08:53,004 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:08:53,004 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:08:53,005 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 13:08:53,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:08:53,217 INFO L263 TraceCheckSpWp]: Trace formula consists of 2049 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-14 13:08:53,221 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:08:53,385 INFO L134 CoverageAnalysis]: Checked inductivity of 360 backedges. 98 proven. 18 refuted. 0 times theorem prover too weak. 244 trivial. 0 not checked. [2022-12-14 13:08:53,385 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 13:08:53,606 INFO L134 CoverageAnalysis]: Checked inductivity of 360 backedges. 30 proven. 24 refuted. 0 times theorem prover too weak. 306 trivial. 0 not checked. [2022-12-14 13:08:53,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [614060860] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 13:08:53,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [460776161] [2022-12-14 13:08:53,609 INFO L159 IcfgInterpreter]: Started Sifa with 114 locations of interest [2022-12-14 13:08:53,609 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 13:08:53,609 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 13:08:53,609 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 13:08:53,609 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 13:08:58,064 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 647 for LOIs [2022-12-14 13:09:05,893 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedInDirection with input of size 42 for LOIs [2022-12-14 13:09:06,145 INFO L197 IcfgInterpreter]: Interpreting procedure isExecutiveFloorCalling with input of size 18 for LOIs [2022-12-14 13:09:06,158 INFO L197 IcfgInterpreter]: Interpreting procedure isPersonOnFloor with input of size 73 for LOIs [2022-12-14 13:09:06,215 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedAtCurrentFloor__wrappee__empty with input of size 25 for LOIs [2022-12-14 13:09:06,266 INFO L197 IcfgInterpreter]: Interpreting procedure isFloorCalling with input of size 50 for LOIs [2022-12-14 13:09:06,276 INFO L197 IcfgInterpreter]: Interpreting procedure resetCallOnFloor with input of size 54 for LOIs [2022-12-14 13:09:06,291 INFO L197 IcfgInterpreter]: Interpreting procedure getCurrentFloorID with input of size 18 for LOIs [2022-12-14 13:09:06,292 INFO L197 IcfgInterpreter]: Interpreting procedure bigMacCall with input of size 569 for LOIs [2022-12-14 13:09:09,346 INFO L197 IcfgInterpreter]: Interpreting procedure initPersonOnFloor with input of size 573 for LOIs [2022-12-14 13:09:09,881 INFO L197 IcfgInterpreter]: Interpreting procedure continueInDirection with input of size 31 for LOIs [2022-12-14 13:09:09,927 INFO L197 IcfgInterpreter]: Interpreting procedure isTopFloor with input of size 29 for LOIs [2022-12-14 13:09:09,928 INFO L197 IcfgInterpreter]: Interpreting procedure getOrigin with input of size 501 for LOIs [2022-12-14 13:09:10,063 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 13:10:05,475 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '76642#(and (<= 0 (+ |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 2147483648)) (= |timeShift_isExecutiveFloor_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1|) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| ~doorState~0) (<= 0 (+ |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483648)) (<= 0 (+ |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483648)) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483647) (<= 0 |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1|) (= |timeShift_isExecutiveFloor_~floorID#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483647) (<= 4 ~executiveFloor~0) (= ~head~0.offset 0) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 0)) (<= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 2147483647) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| |timeShift_isExecutiveFloor_#res#1|) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1|)) (<= |#NULL.offset| 0) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| (ite (= ~executiveFloor~0 |timeShift_isExecutiveFloor_~floorID#1|) 1 0)) (<= 0 |timeShift_~tmp___9~2#1|) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 2147483647) (= |timeShift_areDoorsOpen_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|) (= ~currentFloorID~0 |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1|) (<= 0 ~head~0.base) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|)) (= |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1| 0) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 2147483647) (<= ~head~0.base 0) (<= 0 |timeShift_stopRequestedAtCurrentFloor_#res#1|) (<= |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1| 1) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| |timeShift_areDoorsOpen_#res#1|) (<= |timeShift_~tmp___9~2#1| 1) (= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_#res#1| 1) (<= 0 |#NULL.offset|) (<= ~executiveFloor~0 4) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 12) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 0)) (= |#NULL.base| 0))' at error location [2022-12-14 13:10:05,475 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 13:10:05,475 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 13:10:05,476 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 25 [2022-12-14 13:10:05,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1649776250] [2022-12-14 13:10:05,476 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 13:10:05,476 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-12-14 13:10:05,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:10:05,477 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-12-14 13:10:05,478 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1180, Invalid=10376, Unknown=0, NotChecked=0, Total=11556 [2022-12-14 13:10:05,478 INFO L87 Difference]: Start difference. First operand 3690 states and 5243 transitions. Second operand has 25 states, 19 states have (on average 10.210526315789474) internal successors, (194), 22 states have internal predecessors, (194), 11 states have call successors, (63), 6 states have call predecessors, (63), 9 states have return successors, (61), 11 states have call predecessors, (61), 11 states have call successors, (61) [2022-12-14 13:10:09,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:10:09,219 INFO L93 Difference]: Finished difference Result 7288 states and 10457 transitions. [2022-12-14 13:10:09,220 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-14 13:10:09,220 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 19 states have (on average 10.210526315789474) internal successors, (194), 22 states have internal predecessors, (194), 11 states have call successors, (63), 6 states have call predecessors, (63), 9 states have return successors, (61), 11 states have call predecessors, (61), 11 states have call successors, (61) Word has length 246 [2022-12-14 13:10:09,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:10:09,234 INFO L225 Difference]: With dead ends: 7288 [2022-12-14 13:10:09,234 INFO L226 Difference]: Without dead ends: 4694 [2022-12-14 13:10:09,244 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 782 GetRequests, 635 SyntacticMatches, 20 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6910 ImplicationChecksByTransitivity, 56.4s TimeCoverageRelationStatistics Valid=1680, Invalid=14832, Unknown=0, NotChecked=0, Total=16512 [2022-12-14 13:10:09,245 INFO L413 NwaCegarLoop]: 1028 mSDtfsCounter, 3187 mSDsluCounter, 5930 mSDsCounter, 0 mSdLazyCounter, 5129 mSolverCounterSat, 2222 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3207 SdHoareTripleChecker+Valid, 6958 SdHoareTripleChecker+Invalid, 7351 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2222 IncrementalHoareTripleChecker+Valid, 5129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-12-14 13:10:09,245 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3207 Valid, 6958 Invalid, 7351 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2222 Valid, 5129 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-12-14 13:10:09,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4694 states. [2022-12-14 13:10:09,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4694 to 4578. [2022-12-14 13:10:09,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4578 states, 3321 states have (on average 1.37548931044866) internal successors, (4568), 3404 states have internal predecessors, (4568), 863 states have call successors, (863), 404 states have call predecessors, (863), 393 states have return successors, (1056), 829 states have call predecessors, (1056), 853 states have call successors, (1056) [2022-12-14 13:10:09,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4578 states to 4578 states and 6487 transitions. [2022-12-14 13:10:09,475 INFO L78 Accepts]: Start accepts. Automaton has 4578 states and 6487 transitions. Word has length 246 [2022-12-14 13:10:09,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:10:09,475 INFO L495 AbstractCegarLoop]: Abstraction has 4578 states and 6487 transitions. [2022-12-14 13:10:09,476 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 19 states have (on average 10.210526315789474) internal successors, (194), 22 states have internal predecessors, (194), 11 states have call successors, (63), 6 states have call predecessors, (63), 9 states have return successors, (61), 11 states have call predecessors, (61), 11 states have call successors, (61) [2022-12-14 13:10:09,476 INFO L276 IsEmpty]: Start isEmpty. Operand 4578 states and 6487 transitions. [2022-12-14 13:10:09,489 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 250 [2022-12-14 13:10:09,489 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:10:09,490 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 8, 6, 6, 6, 6, 6, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:10:09,498 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-12-14 13:10:09,690 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-12-14 13:10:09,692 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:10:09,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:10:09,693 INFO L85 PathProgramCache]: Analyzing trace with hash 1563418486, now seen corresponding path program 1 times [2022-12-14 13:10:09,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:10:09,693 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [89689666] [2022-12-14 13:10:09,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:10:09,694 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:10:09,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:10:09,986 INFO L134 CoverageAnalysis]: Checked inductivity of 380 backedges. 30 proven. 27 refuted. 0 times theorem prover too weak. 323 trivial. 0 not checked. [2022-12-14 13:10:09,986 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:10:09,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [89689666] [2022-12-14 13:10:09,986 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [89689666] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:10:09,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [544832557] [2022-12-14 13:10:09,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:10:09,987 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:10:09,987 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:10:09,988 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:10:09,988 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 13:10:10,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:10:10,299 INFO L263 TraceCheckSpWp]: Trace formula consists of 2046 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-14 13:10:10,307 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:10:10,470 INFO L134 CoverageAnalysis]: Checked inductivity of 380 backedges. 101 proven. 18 refuted. 0 times theorem prover too weak. 261 trivial. 0 not checked. [2022-12-14 13:10:10,470 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 13:10:10,715 INFO L134 CoverageAnalysis]: Checked inductivity of 380 backedges. 30 proven. 27 refuted. 0 times theorem prover too weak. 323 trivial. 0 not checked. [2022-12-14 13:10:10,715 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [544832557] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 13:10:10,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2110342656] [2022-12-14 13:10:10,718 INFO L159 IcfgInterpreter]: Started Sifa with 112 locations of interest [2022-12-14 13:10:10,719 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 13:10:10,719 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 13:10:10,719 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 13:10:10,719 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 13:10:15,103 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 647 for LOIs [2022-12-14 13:10:23,875 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedInDirection with input of size 35 for LOIs [2022-12-14 13:10:23,933 INFO L197 IcfgInterpreter]: Interpreting procedure isExecutiveFloorCalling with input of size 46 for LOIs [2022-12-14 13:10:23,990 INFO L197 IcfgInterpreter]: Interpreting procedure isPersonOnFloor with input of size 83 for LOIs [2022-12-14 13:10:24,225 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedAtCurrentFloor__wrappee__empty with input of size 25 for LOIs [2022-12-14 13:10:24,269 INFO L197 IcfgInterpreter]: Interpreting procedure isFloorCalling with input of size 21 for LOIs [2022-12-14 13:10:24,275 INFO L197 IcfgInterpreter]: Interpreting procedure resetCallOnFloor with input of size 59 for LOIs [2022-12-14 13:10:24,287 INFO L197 IcfgInterpreter]: Interpreting procedure getCurrentFloorID with input of size 46 for LOIs [2022-12-14 13:10:24,292 INFO L197 IcfgInterpreter]: Interpreting procedure bigMacCall with input of size 569 for LOIs [2022-12-14 13:10:27,288 INFO L197 IcfgInterpreter]: Interpreting procedure initPersonOnFloor with input of size 573 for LOIs [2022-12-14 13:10:27,820 INFO L197 IcfgInterpreter]: Interpreting procedure continueInDirection with input of size 45 for LOIs [2022-12-14 13:10:27,866 INFO L197 IcfgInterpreter]: Interpreting procedure isTopFloor with input of size 41 for LOIs [2022-12-14 13:10:27,868 INFO L197 IcfgInterpreter]: Interpreting procedure getOrigin with input of size 501 for LOIs [2022-12-14 13:10:27,996 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 13:11:25,123 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '94973#(and (<= 0 (+ |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 2147483648)) (= |timeShift_isExecutiveFloor_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1|) (= ~executiveFloor~0 4) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| ~doorState~0) (<= 0 (+ |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483648)) (<= 0 (+ |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483648)) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483647) (<= 0 |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1|) (= |timeShift_isExecutiveFloor_~floorID#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483647) (= ~head~0.offset 0) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 0)) (<= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 2147483647) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| |timeShift_isExecutiveFloor_#res#1|) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1|)) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| (ite (= ~executiveFloor~0 |timeShift_isExecutiveFloor_~floorID#1|) 1 0)) (<= 0 |timeShift_~tmp___9~2#1|) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 2147483647) (= |timeShift_areDoorsOpen_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|) (= ~currentFloorID~0 |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1|) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|)) (= |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1| 0) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 2147483647) (= ~head~0.base 0) (<= 0 |timeShift_stopRequestedAtCurrentFloor_#res#1|) (= |#NULL.offset| 0) (<= |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1| 1) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| |timeShift_areDoorsOpen_#res#1|) (<= |timeShift_~tmp___9~2#1| 1) (= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_#res#1| 1) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 12) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 0)) (= |#NULL.base| 0))' at error location [2022-12-14 13:11:25,123 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 13:11:25,123 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 13:11:25,123 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 25 [2022-12-14 13:11:25,123 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1537090651] [2022-12-14 13:11:25,123 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 13:11:25,124 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-12-14 13:11:25,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:11:25,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-12-14 13:11:25,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1105, Invalid=11777, Unknown=0, NotChecked=0, Total=12882 [2022-12-14 13:11:25,125 INFO L87 Difference]: Start difference. First operand 4578 states and 6487 transitions. Second operand has 25 states, 19 states have (on average 9.947368421052632) internal successors, (189), 22 states have internal predecessors, (189), 11 states have call successors, (63), 6 states have call predecessors, (63), 9 states have return successors, (61), 11 states have call predecessors, (61), 11 states have call successors, (61) [2022-12-14 13:11:28,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:11:28,542 INFO L93 Difference]: Finished difference Result 8378 states and 11973 transitions. [2022-12-14 13:11:28,543 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-14 13:11:28,543 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 19 states have (on average 9.947368421052632) internal successors, (189), 22 states have internal predecessors, (189), 11 states have call successors, (63), 6 states have call predecessors, (63), 9 states have return successors, (61), 11 states have call predecessors, (61), 11 states have call successors, (61) Word has length 249 [2022-12-14 13:11:28,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:11:28,558 INFO L225 Difference]: With dead ends: 8378 [2022-12-14 13:11:28,558 INFO L226 Difference]: Without dead ends: 5048 [2022-12-14 13:11:28,569 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 791 GetRequests, 641 SyntacticMatches, 17 SemanticMatches, 133 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6968 ImplicationChecksByTransitivity, 58.1s TimeCoverageRelationStatistics Valid=1440, Invalid=16650, Unknown=0, NotChecked=0, Total=18090 [2022-12-14 13:11:28,570 INFO L413 NwaCegarLoop]: 950 mSDtfsCounter, 1621 mSDsluCounter, 6837 mSDsCounter, 0 mSdLazyCounter, 6147 mSolverCounterSat, 866 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1641 SdHoareTripleChecker+Valid, 7787 SdHoareTripleChecker+Invalid, 7013 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 866 IncrementalHoareTripleChecker+Valid, 6147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-12-14 13:11:28,570 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1641 Valid, 7787 Invalid, 7013 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [866 Valid, 6147 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-12-14 13:11:28,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5048 states. [2022-12-14 13:11:28,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5048 to 4932. [2022-12-14 13:11:28,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4932 states, 3581 states have (on average 1.367774364702597) internal successors, (4898), 3664 states have internal predecessors, (4898), 921 states have call successors, (921), 440 states have call predecessors, (921), 429 states have return successors, (1160), 887 states have call predecessors, (1160), 911 states have call successors, (1160) [2022-12-14 13:11:28,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4932 states to 4932 states and 6979 transitions. [2022-12-14 13:11:28,861 INFO L78 Accepts]: Start accepts. Automaton has 4932 states and 6979 transitions. Word has length 249 [2022-12-14 13:11:28,861 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:11:28,861 INFO L495 AbstractCegarLoop]: Abstraction has 4932 states and 6979 transitions. [2022-12-14 13:11:28,861 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 19 states have (on average 9.947368421052632) internal successors, (189), 22 states have internal predecessors, (189), 11 states have call successors, (63), 6 states have call predecessors, (63), 9 states have return successors, (61), 11 states have call predecessors, (61), 11 states have call successors, (61) [2022-12-14 13:11:28,861 INFO L276 IsEmpty]: Start isEmpty. Operand 4932 states and 6979 transitions. [2022-12-14 13:11:28,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 407 [2022-12-14 13:11:28,877 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:11:28,877 INFO L195 NwaCegarLoop]: trace histogram [18, 14, 14, 14, 14, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:11:28,885 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-12-14 13:11:29,077 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-12-14 13:11:29,078 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:11:29,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:11:29,078 INFO L85 PathProgramCache]: Analyzing trace with hash -1197704916, now seen corresponding path program 1 times [2022-12-14 13:11:29,078 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:11:29,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1900794657] [2022-12-14 13:11:29,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:11:29,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:11:29,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:11:29,333 INFO L134 CoverageAnalysis]: Checked inductivity of 1051 backedges. 53 proven. 24 refuted. 0 times theorem prover too weak. 974 trivial. 0 not checked. [2022-12-14 13:11:29,334 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:11:29,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1900794657] [2022-12-14 13:11:29,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1900794657] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:11:29,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1378565088] [2022-12-14 13:11:29,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:11:29,334 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:11:29,334 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:11:29,335 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:11:29,336 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-12-14 13:11:29,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:11:29,760 INFO L263 TraceCheckSpWp]: Trace formula consists of 3388 conjuncts, 2 conjunts are in the unsatisfiable core [2022-12-14 13:11:29,767 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:11:29,781 INFO L134 CoverageAnalysis]: Checked inductivity of 1051 backedges. 371 proven. 0 refuted. 0 times theorem prover too weak. 680 trivial. 0 not checked. [2022-12-14 13:11:29,781 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 13:11:29,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1378565088] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:11:29,781 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 13:11:29,782 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2022-12-14 13:11:29,782 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1361016229] [2022-12-14 13:11:29,782 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:11:29,782 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 13:11:29,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:11:29,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 13:11:29,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-14 13:11:29,783 INFO L87 Difference]: Start difference. First operand 4932 states and 6979 transitions. Second operand has 3 states, 3 states have (on average 44.333333333333336) internal successors, (133), 3 states have internal predecessors, (133), 2 states have call successors, (40), 2 states have call predecessors, (40), 2 states have return successors, (39), 2 states have call predecessors, (39), 2 states have call successors, (39) [2022-12-14 13:11:30,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:11:30,221 INFO L93 Difference]: Finished difference Result 8630 states and 12264 transitions. [2022-12-14 13:11:30,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 13:11:30,221 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 44.333333333333336) internal successors, (133), 3 states have internal predecessors, (133), 2 states have call successors, (40), 2 states have call predecessors, (40), 2 states have return successors, (39), 2 states have call predecessors, (39), 2 states have call successors, (39) Word has length 406 [2022-12-14 13:11:30,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:11:30,236 INFO L225 Difference]: With dead ends: 8630 [2022-12-14 13:11:30,237 INFO L226 Difference]: Without dead ends: 5166 [2022-12-14 13:11:30,246 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 411 GetRequests, 406 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-14 13:11:30,246 INFO L413 NwaCegarLoop]: 581 mSDtfsCounter, 379 mSDsluCounter, 407 mSDsCounter, 0 mSdLazyCounter, 140 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 379 SdHoareTripleChecker+Valid, 988 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 13:11:30,247 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [379 Valid, 988 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 13:11:30,250 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5166 states. [2022-12-14 13:11:30,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5166 to 5144. [2022-12-14 13:11:30,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5144 states, 3735 states have (on average 1.3493975903614457) internal successors, (5040), 3818 states have internal predecessors, (5040), 955 states have call successors, (955), 464 states have call predecessors, (955), 453 states have return successors, (1198), 921 states have call predecessors, (1198), 945 states have call successors, (1198) [2022-12-14 13:11:30,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5144 states to 5144 states and 7193 transitions. [2022-12-14 13:11:30,494 INFO L78 Accepts]: Start accepts. Automaton has 5144 states and 7193 transitions. Word has length 406 [2022-12-14 13:11:30,494 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:11:30,495 INFO L495 AbstractCegarLoop]: Abstraction has 5144 states and 7193 transitions. [2022-12-14 13:11:30,495 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 44.333333333333336) internal successors, (133), 3 states have internal predecessors, (133), 2 states have call successors, (40), 2 states have call predecessors, (40), 2 states have return successors, (39), 2 states have call predecessors, (39), 2 states have call successors, (39) [2022-12-14 13:11:30,495 INFO L276 IsEmpty]: Start isEmpty. Operand 5144 states and 7193 transitions. [2022-12-14 13:11:30,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 252 [2022-12-14 13:11:30,508 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:11:30,508 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 8, 6, 6, 6, 6, 6, 6, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:11:30,516 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-12-14 13:11:30,709 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-12-14 13:11:30,709 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:11:30,709 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:11:30,709 INFO L85 PathProgramCache]: Analyzing trace with hash -137207738, now seen corresponding path program 1 times [2022-12-14 13:11:30,709 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:11:30,709 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [914087002] [2022-12-14 13:11:30,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:11:30,710 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:11:30,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:11:30,952 INFO L134 CoverageAnalysis]: Checked inductivity of 396 backedges. 30 proven. 31 refuted. 0 times theorem prover too weak. 335 trivial. 0 not checked. [2022-12-14 13:11:30,952 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:11:30,953 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [914087002] [2022-12-14 13:11:30,953 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [914087002] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:11:30,953 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1396565704] [2022-12-14 13:11:30,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:11:30,953 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:11:30,953 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:11:30,954 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:11:30,954 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-12-14 13:11:31,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:11:31,216 INFO L263 TraceCheckSpWp]: Trace formula consists of 2045 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-14 13:11:31,221 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:11:31,389 INFO L134 CoverageAnalysis]: Checked inductivity of 396 backedges. 105 proven. 18 refuted. 0 times theorem prover too weak. 273 trivial. 0 not checked. [2022-12-14 13:11:31,389 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 13:11:31,585 INFO L134 CoverageAnalysis]: Checked inductivity of 396 backedges. 30 proven. 31 refuted. 0 times theorem prover too weak. 335 trivial. 0 not checked. [2022-12-14 13:11:31,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1396565704] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 13:11:31,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1424581098] [2022-12-14 13:11:31,587 INFO L159 IcfgInterpreter]: Started Sifa with 111 locations of interest [2022-12-14 13:11:31,587 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 13:11:31,587 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 13:11:31,587 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 13:11:31,587 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 13:11:35,952 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 647 for LOIs [2022-12-14 13:11:42,281 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedInDirection with input of size 35 for LOIs [2022-12-14 13:11:42,356 INFO L197 IcfgInterpreter]: Interpreting procedure isExecutiveFloorCalling with input of size 46 for LOIs [2022-12-14 13:11:42,436 INFO L197 IcfgInterpreter]: Interpreting procedure isPersonOnFloor with input of size 82 for LOIs [2022-12-14 13:11:42,624 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedAtCurrentFloor__wrappee__empty with input of size 20 for LOIs [2022-12-14 13:11:42,667 INFO L197 IcfgInterpreter]: Interpreting procedure isFloorCalling with input of size 21 for LOIs [2022-12-14 13:11:42,675 INFO L197 IcfgInterpreter]: Interpreting procedure resetCallOnFloor with input of size 70 for LOIs [2022-12-14 13:11:42,687 INFO L197 IcfgInterpreter]: Interpreting procedure getCurrentFloorID with input of size 46 for LOIs [2022-12-14 13:11:42,692 INFO L197 IcfgInterpreter]: Interpreting procedure bigMacCall with input of size 569 for LOIs [2022-12-14 13:11:45,684 INFO L197 IcfgInterpreter]: Interpreting procedure initPersonOnFloor with input of size 573 for LOIs [2022-12-14 13:11:46,215 INFO L197 IcfgInterpreter]: Interpreting procedure continueInDirection with input of size 45 for LOIs [2022-12-14 13:11:46,262 INFO L197 IcfgInterpreter]: Interpreting procedure isTopFloor with input of size 41 for LOIs [2022-12-14 13:11:46,264 INFO L197 IcfgInterpreter]: Interpreting procedure getOrigin with input of size 501 for LOIs [2022-12-14 13:11:46,392 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 13:12:37,172 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '136337#(and (<= 0 (+ |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 2147483648)) (= |timeShift_isExecutiveFloor_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1|) (= ~executiveFloor~0 4) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| ~doorState~0) (<= 0 (+ |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483648)) (<= 0 (+ |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483648)) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483647) (<= 0 |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1|) (= |timeShift_isExecutiveFloor_~floorID#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483647) (= ~head~0.offset 0) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 0)) (<= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 2147483647) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| |timeShift_isExecutiveFloor_#res#1|) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1|)) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| (ite (= ~executiveFloor~0 |timeShift_isExecutiveFloor_~floorID#1|) 1 0)) (<= 0 |timeShift_~tmp___9~2#1|) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 2147483647) (= |timeShift_areDoorsOpen_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|) (= ~currentFloorID~0 |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1|) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|)) (= |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1| 0) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 2147483647) (= ~head~0.base 0) (<= 0 |timeShift_stopRequestedAtCurrentFloor_#res#1|) (= |#NULL.offset| 0) (<= |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1| 1) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| |timeShift_areDoorsOpen_#res#1|) (<= |timeShift_~tmp___9~2#1| 1) (= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_#res#1| 1) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 12) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 0)) (= |#NULL.base| 0))' at error location [2022-12-14 13:12:37,173 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 13:12:37,173 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 13:12:37,173 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-12-14 13:12:37,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [146487617] [2022-12-14 13:12:37,173 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 13:12:37,174 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-12-14 13:12:37,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:12:37,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-12-14 13:12:37,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=857, Invalid=11133, Unknown=0, NotChecked=0, Total=11990 [2022-12-14 13:12:37,176 INFO L87 Difference]: Start difference. First operand 5144 states and 7193 transitions. Second operand has 22 states, 17 states have (on average 10.0) internal successors, (170), 19 states have internal predecessors, (170), 8 states have call successors, (61), 5 states have call predecessors, (61), 9 states have return successors, (60), 9 states have call predecessors, (60), 8 states have call successors, (60) [2022-12-14 13:12:39,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:12:39,495 INFO L93 Difference]: Finished difference Result 7791 states and 10878 transitions. [2022-12-14 13:12:39,495 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-12-14 13:12:39,495 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 17 states have (on average 10.0) internal successors, (170), 19 states have internal predecessors, (170), 8 states have call successors, (61), 5 states have call predecessors, (61), 9 states have return successors, (60), 9 states have call predecessors, (60), 8 states have call successors, (60) Word has length 251 [2022-12-14 13:12:39,496 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:12:39,510 INFO L225 Difference]: With dead ends: 7791 [2022-12-14 13:12:39,510 INFO L226 Difference]: Without dead ends: 5230 [2022-12-14 13:12:39,518 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 785 GetRequests, 649 SyntacticMatches, 14 SemanticMatches, 122 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5542 ImplicationChecksByTransitivity, 51.4s TimeCoverageRelationStatistics Valid=1048, Invalid=14204, Unknown=0, NotChecked=0, Total=15252 [2022-12-14 13:12:39,518 INFO L413 NwaCegarLoop]: 845 mSDtfsCounter, 1634 mSDsluCounter, 5041 mSDsCounter, 0 mSdLazyCounter, 3557 mSolverCounterSat, 701 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1652 SdHoareTripleChecker+Valid, 5886 SdHoareTripleChecker+Invalid, 4258 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 701 IncrementalHoareTripleChecker+Valid, 3557 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-12-14 13:12:39,518 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1652 Valid, 5886 Invalid, 4258 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [701 Valid, 3557 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-12-14 13:12:39,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5230 states. [2022-12-14 13:12:39,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5230 to 5123. [2022-12-14 13:12:39,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5123 states, 3714 states have (on average 1.34760366182014) internal successors, (5005), 3797 states have internal predecessors, (5005), 955 states have call successors, (955), 464 states have call predecessors, (955), 453 states have return successors, (1198), 921 states have call predecessors, (1198), 945 states have call successors, (1198) [2022-12-14 13:12:39,768 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5123 states to 5123 states and 7158 transitions. [2022-12-14 13:12:39,769 INFO L78 Accepts]: Start accepts. Automaton has 5123 states and 7158 transitions. Word has length 251 [2022-12-14 13:12:39,769 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:12:39,769 INFO L495 AbstractCegarLoop]: Abstraction has 5123 states and 7158 transitions. [2022-12-14 13:12:39,769 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 17 states have (on average 10.0) internal successors, (170), 19 states have internal predecessors, (170), 8 states have call successors, (61), 5 states have call predecessors, (61), 9 states have return successors, (60), 9 states have call predecessors, (60), 8 states have call successors, (60) [2022-12-14 13:12:39,769 INFO L276 IsEmpty]: Start isEmpty. Operand 5123 states and 7158 transitions. [2022-12-14 13:12:39,783 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 418 [2022-12-14 13:12:39,783 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:12:39,783 INFO L195 NwaCegarLoop]: trace histogram [20, 14, 14, 14, 14, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:12:39,790 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-12-14 13:12:39,984 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-12-14 13:12:39,984 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:12:39,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:12:39,985 INFO L85 PathProgramCache]: Analyzing trace with hash -1122067834, now seen corresponding path program 1 times [2022-12-14 13:12:39,985 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:12:39,985 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [812759979] [2022-12-14 13:12:39,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:12:39,985 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:12:40,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:12:40,274 INFO L134 CoverageAnalysis]: Checked inductivity of 1155 backedges. 52 proven. 23 refuted. 0 times theorem prover too weak. 1080 trivial. 0 not checked. [2022-12-14 13:12:40,274 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:12:40,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [812759979] [2022-12-14 13:12:40,274 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [812759979] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:12:40,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1460830586] [2022-12-14 13:12:40,274 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:12:40,274 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:12:40,275 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:12:40,275 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:12:40,276 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-12-14 13:12:40,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:12:40,651 INFO L263 TraceCheckSpWp]: Trace formula consists of 3414 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 13:12:40,657 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:12:40,678 INFO L134 CoverageAnalysis]: Checked inductivity of 1155 backedges. 548 proven. 0 refuted. 0 times theorem prover too weak. 607 trivial. 0 not checked. [2022-12-14 13:12:40,678 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 13:12:40,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1460830586] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:12:40,679 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 13:12:40,679 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2022-12-14 13:12:40,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1056113088] [2022-12-14 13:12:40,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:12:40,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 13:12:40,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:12:40,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 13:12:40,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-14 13:12:40,681 INFO L87 Difference]: Start difference. First operand 5123 states and 7158 transitions. Second operand has 3 states, 3 states have (on average 45.333333333333336) internal successors, (136), 3 states have internal predecessors, (136), 2 states have call successors, (42), 2 states have call predecessors, (42), 2 states have return successors, (41), 2 states have call predecessors, (41), 2 states have call successors, (41) [2022-12-14 13:12:41,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:12:41,021 INFO L93 Difference]: Finished difference Result 10962 states and 15830 transitions. [2022-12-14 13:12:41,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 13:12:41,021 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 45.333333333333336) internal successors, (136), 3 states have internal predecessors, (136), 2 states have call successors, (42), 2 states have call predecessors, (42), 2 states have return successors, (41), 2 states have call predecessors, (41), 2 states have call successors, (41) Word has length 417 [2022-12-14 13:12:41,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:12:41,048 INFO L225 Difference]: With dead ends: 10962 [2022-12-14 13:12:41,048 INFO L226 Difference]: Without dead ends: 6051 [2022-12-14 13:12:41,069 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 422 GetRequests, 417 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-14 13:12:41,069 INFO L413 NwaCegarLoop]: 529 mSDtfsCounter, 63 mSDsluCounter, 493 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 1022 SdHoareTripleChecker+Invalid, 90 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 13:12:41,070 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 1022 Invalid, 90 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 13:12:41,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6051 states. [2022-12-14 13:12:41,377 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6051 to 5755. [2022-12-14 13:12:41,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5755 states, 4256 states have (on average 1.349859022556391) internal successors, (5745), 4343 states have internal predecessors, (5745), 1041 states have call successors, (1041), 464 states have call predecessors, (1041), 457 states have return successors, (1288), 1007 states have call predecessors, (1288), 1031 states have call successors, (1288) [2022-12-14 13:12:41,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5755 states to 5755 states and 8074 transitions. [2022-12-14 13:12:41,397 INFO L78 Accepts]: Start accepts. Automaton has 5755 states and 8074 transitions. Word has length 417 [2022-12-14 13:12:41,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:12:41,397 INFO L495 AbstractCegarLoop]: Abstraction has 5755 states and 8074 transitions. [2022-12-14 13:12:41,397 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 45.333333333333336) internal successors, (136), 3 states have internal predecessors, (136), 2 states have call successors, (42), 2 states have call predecessors, (42), 2 states have return successors, (41), 2 states have call predecessors, (41), 2 states have call successors, (41) [2022-12-14 13:12:41,397 INFO L276 IsEmpty]: Start isEmpty. Operand 5755 states and 8074 transitions. [2022-12-14 13:12:41,411 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 397 [2022-12-14 13:12:41,412 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:12:41,412 INFO L195 NwaCegarLoop]: trace histogram [19, 14, 14, 14, 14, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:12:41,420 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-12-14 13:12:41,612 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-12-14 13:12:41,614 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:12:41,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:12:41,615 INFO L85 PathProgramCache]: Analyzing trace with hash 1677988067, now seen corresponding path program 1 times [2022-12-14 13:12:41,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:12:41,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [893107029] [2022-12-14 13:12:41,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:12:41,616 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:12:41,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:12:41,900 INFO L134 CoverageAnalysis]: Checked inductivity of 1099 backedges. 50 proven. 23 refuted. 0 times theorem prover too weak. 1026 trivial. 0 not checked. [2022-12-14 13:12:41,900 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:12:41,900 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [893107029] [2022-12-14 13:12:41,900 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [893107029] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:12:41,900 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1518323290] [2022-12-14 13:12:41,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:12:41,901 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:12:41,901 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:12:41,901 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:12:41,902 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 13:12:42,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:12:42,294 INFO L263 TraceCheckSpWp]: Trace formula consists of 3374 conjuncts, 21 conjunts are in the unsatisfiable core [2022-12-14 13:12:42,299 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:12:42,592 INFO L134 CoverageAnalysis]: Checked inductivity of 1099 backedges. 162 proven. 54 refuted. 0 times theorem prover too weak. 883 trivial. 0 not checked. [2022-12-14 13:12:42,592 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 13:12:42,915 INFO L134 CoverageAnalysis]: Checked inductivity of 1099 backedges. 46 proven. 41 refuted. 0 times theorem prover too weak. 1012 trivial. 0 not checked. [2022-12-14 13:12:42,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1518323290] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 13:12:42,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1268188684] [2022-12-14 13:12:42,917 INFO L159 IcfgInterpreter]: Started Sifa with 140 locations of interest [2022-12-14 13:12:42,917 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 13:12:42,918 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 13:12:42,918 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 13:12:42,918 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 13:12:48,906 INFO L197 IcfgInterpreter]: Interpreting procedure cleanup with input of size 550 for LOIs [2022-12-14 13:12:51,637 INFO L197 IcfgInterpreter]: Interpreting procedure timeShift with input of size 577 for LOIs [2022-12-14 13:12:55,102 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedInDirection with input of size 29 for LOIs [2022-12-14 13:12:55,208 INFO L197 IcfgInterpreter]: Interpreting procedure isExecutiveFloorCalling with input of size 37 for LOIs [2022-12-14 13:12:55,258 INFO L197 IcfgInterpreter]: Interpreting procedure isPersonOnFloor with input of size 87 for LOIs [2022-12-14 13:12:55,369 INFO L197 IcfgInterpreter]: Interpreting procedure stopRequestedAtCurrentFloor__wrappee__empty with input of size 40 for LOIs [2022-12-14 13:12:55,444 INFO L197 IcfgInterpreter]: Interpreting procedure isFloorCalling with input of size 18 for LOIs [2022-12-14 13:12:55,450 INFO L197 IcfgInterpreter]: Interpreting procedure resetCallOnFloor with input of size 63 for LOIs [2022-12-14 13:12:55,462 INFO L197 IcfgInterpreter]: Interpreting procedure getCurrentFloorID with input of size 48 for LOIs [2022-12-14 13:12:55,466 INFO L197 IcfgInterpreter]: Interpreting procedure bigMacCall with input of size 569 for LOIs [2022-12-14 13:12:58,472 INFO L197 IcfgInterpreter]: Interpreting procedure isBlocked with input of size 401 for LOIs [2022-12-14 13:12:58,527 INFO L197 IcfgInterpreter]: Interpreting procedure continueInDirection with input of size 31 for LOIs [2022-12-14 13:12:58,577 INFO L197 IcfgInterpreter]: Interpreting procedure isTopFloor with input of size 29 for LOIs [2022-12-14 13:12:58,578 INFO L197 IcfgInterpreter]: Interpreting procedure bobCall with input of size 506 for LOIs [2022-12-14 13:13:00,540 INFO L197 IcfgInterpreter]: Interpreting procedure initPersonOnFloor with input of size 770 for LOIs [2022-12-14 13:13:09,323 INFO L197 IcfgInterpreter]: Interpreting procedure getOrigin with input of size 623 for LOIs [2022-12-14 13:13:09,715 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 13:13:19,960 WARN L233 SmtUtils]: Spent 5.53s on a formula simplification. DAG size of input: 623 DAG size of output: 504 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 13:13:26,457 WARN L233 SmtUtils]: Spent 6.21s on a formula simplification. DAG size of input: 663 DAG size of output: 518 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 13:13:46,468 WARN L233 SmtUtils]: Spent 10.91s on a formula simplification. DAG size of input: 770 DAG size of output: 638 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 13:13:56,944 WARN L233 SmtUtils]: Spent 9.83s on a formula simplification. DAG size of input: 842 DAG size of output: 746 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 13:15:05,990 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '182348#(and (= |timeShift_isExecutiveFloor_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1|) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| ~doorState~0) (<= 0 (+ |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483648)) (<= 0 (+ |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483648)) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| 2147483647) (<= 0 |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1|) (= |timeShift_isExecutiveFloor_~floorID#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 2147483647) (<= 4 ~executiveFloor~0) (= ~head~0.offset 0) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 0)) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| |timeShift_isExecutiveFloor_#res#1|) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1|)) (<= |#NULL.offset| 0) (= |timeShift_isExecutiveFloor_~retValue_acc~29#1| (ite (= ~executiveFloor~0 |timeShift_isExecutiveFloor_~floorID#1|) 1 0)) (<= 0 |timeShift_~tmp___9~2#1|) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1| 2147483647) (= |timeShift_areDoorsOpen_#res#1| |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|) (= ~currentFloorID~0 |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1|) (<= 0 ~head~0.base) (<= 0 (+ 2147483648 |timeShift___utac_acc__Specification14_spec__1_~tmp___1~2#1|)) (= |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1| 0) (<= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 2147483647) (<= ~head~0.base 0) (<= 0 |timeShift_stopRequestedAtCurrentFloor_#res#1|) (<= |timeShift_stopRequestedAtCurrentFloor_~retValue_acc~25#1| 1) (= |timeShift_areDoorsOpen_~retValue_acc~15#1| |timeShift_areDoorsOpen_#res#1|) (<= |timeShift_~tmp___9~2#1| 1) (= |timeShift___utac_acc__Specification14_spec__1_~tmp~2#1| |timeShift_isExecutiveFloor_#in~floorID#1|) (<= |timeShift_stopRequestedAtCurrentFloor_#res#1| 1) (<= 0 |#NULL.offset|) (<= ~executiveFloor~0 4) (<= 0 |#StackHeapBarrier|) (= ~cleanupTimeShifts~0 12) (not (= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 0)) (= |#NULL.base| 0))' at error location [2022-12-14 13:15:05,990 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 13:15:05,990 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 13:15:05,990 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 10, 10] total 18 [2022-12-14 13:15:05,990 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [313652935] [2022-12-14 13:15:05,990 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 13:15:05,991 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-12-14 13:15:05,991 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:15:05,991 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-12-14 13:15:05,992 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=942, Invalid=14310, Unknown=0, NotChecked=0, Total=15252 [2022-12-14 13:15:05,992 INFO L87 Difference]: Start difference. First operand 5755 states and 8074 transitions. Second operand has 18 states, 15 states have (on average 14.333333333333334) internal successors, (215), 15 states have internal predecessors, (215), 5 states have call successors, (86), 4 states have call predecessors, (86), 8 states have return successors, (84), 7 states have call predecessors, (84), 5 states have call successors, (84) [2022-12-14 13:15:08,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:15:08,524 INFO L93 Difference]: Finished difference Result 11537 states and 16232 transitions. [2022-12-14 13:15:08,524 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-12-14 13:15:08,524 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 15 states have (on average 14.333333333333334) internal successors, (215), 15 states have internal predecessors, (215), 5 states have call successors, (86), 4 states have call predecessors, (86), 8 states have return successors, (84), 7 states have call predecessors, (84), 5 states have call successors, (84) Word has length 396 [2022-12-14 13:15:08,525 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:15:08,543 INFO L225 Difference]: With dead ends: 11537 [2022-12-14 13:15:08,543 INFO L226 Difference]: Without dead ends: 6142 [2022-12-14 13:15:08,556 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1221 GetRequests, 1013 SyntacticMatches, 67 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9514 ImplicationChecksByTransitivity, 117.1s TimeCoverageRelationStatistics Valid=1119, Invalid=19187, Unknown=0, NotChecked=0, Total=20306 [2022-12-14 13:15:08,557 INFO L413 NwaCegarLoop]: 753 mSDtfsCounter, 1339 mSDsluCounter, 6659 mSDsCounter, 0 mSdLazyCounter, 3836 mSolverCounterSat, 597 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1354 SdHoareTripleChecker+Valid, 7412 SdHoareTripleChecker+Invalid, 4433 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 597 IncrementalHoareTripleChecker+Valid, 3836 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-12-14 13:15:08,557 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1354 Valid, 7412 Invalid, 4433 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [597 Valid, 3836 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-12-14 13:15:08,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6142 states. [2022-12-14 13:15:08,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6142 to 5982. [2022-12-14 13:15:08,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5982 states, 4422 states have (on average 1.3387607417458163) internal successors, (5920), 4541 states have internal predecessors, (5920), 1050 states have call successors, (1050), 470 states have call predecessors, (1050), 509 states have return successors, (1354), 1030 states have call predecessors, (1354), 1040 states have call successors, (1354) [2022-12-14 13:15:08,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5982 states to 5982 states and 8324 transitions. [2022-12-14 13:15:08,860 INFO L78 Accepts]: Start accepts. Automaton has 5982 states and 8324 transitions. Word has length 396 [2022-12-14 13:15:08,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:15:08,860 INFO L495 AbstractCegarLoop]: Abstraction has 5982 states and 8324 transitions. [2022-12-14 13:15:08,861 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 15 states have (on average 14.333333333333334) internal successors, (215), 15 states have internal predecessors, (215), 5 states have call successors, (86), 4 states have call predecessors, (86), 8 states have return successors, (84), 7 states have call predecessors, (84), 5 states have call successors, (84) [2022-12-14 13:15:08,861 INFO L276 IsEmpty]: Start isEmpty. Operand 5982 states and 8324 transitions. [2022-12-14 13:15:08,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 459 [2022-12-14 13:15:08,878 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:15:08,878 INFO L195 NwaCegarLoop]: trace histogram [20, 15, 15, 15, 15, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:15:08,886 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-12-14 13:15:09,078 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:15:09,079 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:15:09,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:15:09,080 INFO L85 PathProgramCache]: Analyzing trace with hash -1105799914, now seen corresponding path program 1 times [2022-12-14 13:15:09,080 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:15:09,080 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1120969794] [2022-12-14 13:15:09,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:15:09,080 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:15:09,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:15:09,580 INFO L134 CoverageAnalysis]: Checked inductivity of 1246 backedges. 50 proven. 91 refuted. 0 times theorem prover too weak. 1105 trivial. 0 not checked. [2022-12-14 13:15:09,580 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:15:09,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1120969794] [2022-12-14 13:15:09,580 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1120969794] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:15:09,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [807716202] [2022-12-14 13:15:09,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:15:09,580 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:15:09,580 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:15:09,581 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:15:09,582 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-12-14 13:15:09,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:15:09,947 INFO L263 TraceCheckSpWp]: Trace formula consists of 3527 conjuncts, 2 conjunts are in the unsatisfiable core [2022-12-14 13:15:09,955 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:15:09,975 INFO L134 CoverageAnalysis]: Checked inductivity of 1246 backedges. 408 proven. 0 refuted. 0 times theorem prover too weak. 838 trivial. 0 not checked. [2022-12-14 13:15:09,975 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 13:15:09,975 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [807716202] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:15:09,975 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 13:15:09,976 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 9 [2022-12-14 13:15:09,976 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1672722509] [2022-12-14 13:15:09,976 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:15:09,976 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 13:15:09,976 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:15:09,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 13:15:09,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-12-14 13:15:09,977 INFO L87 Difference]: Start difference. First operand 5982 states and 8324 transitions. Second operand has 3 states, 3 states have (on average 51.333333333333336) internal successors, (154), 3 states have internal predecessors, (154), 2 states have call successors, (44), 2 states have call predecessors, (44), 2 states have return successors, (43), 2 states have call predecessors, (43), 2 states have call successors, (43) [2022-12-14 13:15:10,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:15:10,425 INFO L93 Difference]: Finished difference Result 9615 states and 13420 transitions. [2022-12-14 13:15:10,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 13:15:10,425 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 51.333333333333336) internal successors, (154), 3 states have internal predecessors, (154), 2 states have call successors, (44), 2 states have call predecessors, (44), 2 states have return successors, (43), 2 states have call predecessors, (43), 2 states have call successors, (43) Word has length 458 [2022-12-14 13:15:10,426 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:15:10,443 INFO L225 Difference]: With dead ends: 9615 [2022-12-14 13:15:10,443 INFO L226 Difference]: Without dead ends: 5760 [2022-12-14 13:15:10,453 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 468 GetRequests, 461 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-12-14 13:15:10,454 INFO L413 NwaCegarLoop]: 591 mSDtfsCounter, 394 mSDsluCounter, 400 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 394 SdHoareTripleChecker+Valid, 991 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 13:15:10,454 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [394 Valid, 991 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 13:15:10,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5760 states. [2022-12-14 13:15:10,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5760 to 5730. [2022-12-14 13:15:10,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5730 states, 4218 states have (on average 1.3338074917022285) internal successors, (5626), 4335 states have internal predecessors, (5626), 1016 states have call successors, (1016), 458 states have call predecessors, (1016), 495 states have return successors, (1298), 996 states have call predecessors, (1298), 1006 states have call successors, (1298) [2022-12-14 13:15:10,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5730 states to 5730 states and 7940 transitions. [2022-12-14 13:15:10,754 INFO L78 Accepts]: Start accepts. Automaton has 5730 states and 7940 transitions. Word has length 458 [2022-12-14 13:15:10,755 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:15:10,755 INFO L495 AbstractCegarLoop]: Abstraction has 5730 states and 7940 transitions. [2022-12-14 13:15:10,755 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 51.333333333333336) internal successors, (154), 3 states have internal predecessors, (154), 2 states have call successors, (44), 2 states have call predecessors, (44), 2 states have return successors, (43), 2 states have call predecessors, (43), 2 states have call successors, (43) [2022-12-14 13:15:10,755 INFO L276 IsEmpty]: Start isEmpty. Operand 5730 states and 7940 transitions. [2022-12-14 13:15:10,768 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 367 [2022-12-14 13:15:10,768 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 13:15:10,769 INFO L195 NwaCegarLoop]: trace histogram [16, 12, 12, 12, 12, 6, 6, 6, 6, 6, 6, 6, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:15:10,777 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-12-14 13:15:10,969 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:15:10,971 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-14 13:15:10,971 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 13:15:10,972 INFO L85 PathProgramCache]: Analyzing trace with hash 2052272761, now seen corresponding path program 1 times [2022-12-14 13:15:10,972 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 13:15:10,972 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [375248483] [2022-12-14 13:15:10,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:15:10,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 13:15:11,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:15:11,411 INFO L134 CoverageAnalysis]: Checked inductivity of 843 backedges. 34 proven. 51 refuted. 0 times theorem prover too weak. 758 trivial. 0 not checked. [2022-12-14 13:15:11,412 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 13:15:11,412 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [375248483] [2022-12-14 13:15:11,412 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [375248483] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 13:15:11,412 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [394872738] [2022-12-14 13:15:11,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 13:15:11,412 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 13:15:11,412 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 13:15:11,413 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 13:15:11,413 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-12-14 13:15:11,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 13:15:11,766 INFO L263 TraceCheckSpWp]: Trace formula consists of 3069 conjuncts, 36 conjunts are in the unsatisfiable core [2022-12-14 13:15:11,771 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 13:15:12,166 INFO L134 CoverageAnalysis]: Checked inductivity of 843 backedges. 141 proven. 0 refuted. 0 times theorem prover too weak. 702 trivial. 0 not checked. [2022-12-14 13:15:12,166 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 13:15:12,166 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [394872738] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 13:15:12,166 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 13:15:12,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [8] total 16 [2022-12-14 13:15:12,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1908356830] [2022-12-14 13:15:12,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 13:15:12,167 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-12-14 13:15:12,167 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 13:15:12,168 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-12-14 13:15:12,168 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=196, Unknown=0, NotChecked=0, Total=240 [2022-12-14 13:15:12,168 INFO L87 Difference]: Start difference. First operand 5730 states and 7940 transitions. Second operand has 10 states, 8 states have (on average 13.75) internal successors, (110), 7 states have internal predecessors, (110), 2 states have call successors, (37), 2 states have call predecessors, (37), 4 states have return successors, (35), 4 states have call predecessors, (35), 2 states have call successors, (35) [2022-12-14 13:15:13,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 13:15:13,536 INFO L93 Difference]: Finished difference Result 8357 states and 11601 transitions. [2022-12-14 13:15:13,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 13:15:13,537 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 8 states have (on average 13.75) internal successors, (110), 7 states have internal predecessors, (110), 2 states have call successors, (37), 2 states have call predecessors, (37), 4 states have return successors, (35), 4 states have call predecessors, (35), 2 states have call successors, (35) Word has length 366 [2022-12-14 13:15:13,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 13:15:13,538 INFO L225 Difference]: With dead ends: 8357 [2022-12-14 13:15:13,538 INFO L226 Difference]: Without dead ends: 0 [2022-12-14 13:15:13,551 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 380 GetRequests, 362 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=76, Invalid=304, Unknown=0, NotChecked=0, Total=380 [2022-12-14 13:15:13,552 INFO L413 NwaCegarLoop]: 770 mSDtfsCounter, 766 mSDsluCounter, 2743 mSDsCounter, 0 mSdLazyCounter, 2481 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 773 SdHoareTripleChecker+Valid, 3513 SdHoareTripleChecker+Invalid, 2582 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 2481 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-12-14 13:15:13,552 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [773 Valid, 3513 Invalid, 2582 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 2481 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-12-14 13:15:13,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-14 13:15:13,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-14 13:15:13,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 13:15:13,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-14 13:15:13,553 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 366 [2022-12-14 13:15:13,553 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 13:15:13,553 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-14 13:15:13,553 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 8 states have (on average 13.75) internal successors, (110), 7 states have internal predecessors, (110), 2 states have call successors, (37), 2 states have call predecessors, (37), 4 states have return successors, (35), 4 states have call predecessors, (35), 2 states have call successors, (35) [2022-12-14 13:15:13,553 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-14 13:15:13,553 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-14 13:15:13,555 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-14 13:15:13,563 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-12-14 13:15:13,756 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2022-12-14 13:15:13,764 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-14 13:17:22,162 INFO L899 garLoopResultBuilder]: For program point getDestinationEXIT(lines 276 314) no Hoare annotation was computed. [2022-12-14 13:17:22,162 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 276 314) the Hoare annotation is: true [2022-12-14 13:17:22,162 INFO L899 garLoopResultBuilder]: For program point isBlockedEXIT(lines 1804 1812) no Hoare annotation was computed. [2022-12-14 13:17:22,162 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1804 1812) the Hoare annotation is: true [2022-12-14 13:17:22,162 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 464 474) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~executiveFloor~0 4)) (not (= ~currentHeading~0 1)) (not (= ~doorState~0 1)) (= ~calls_4~0 0) (not (= 0 |old(~calls_4~0)|))) [2022-12-14 13:17:22,163 INFO L895 garLoopResultBuilder]: At program point L470(line 470) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~executiveFloor~0 4)) (not (= ~currentHeading~0 1)) (not (= ~doorState~0 1)) (= ~calls_4~0 0) (not (= 0 |old(~calls_4~0)|))) [2022-12-14 13:17:22,163 INFO L899 garLoopResultBuilder]: For program point bigMacCallEXIT(lines 464 474) no Hoare annotation was computed. [2022-12-14 13:17:22,163 INFO L895 garLoopResultBuilder]: At program point L469(line 469) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~executiveFloor~0 4)) (not (= ~currentHeading~0 1)) (not (= ~doorState~0 1)) (= ~calls_4~0 0) (not (= 0 |old(~calls_4~0)|))) [2022-12-14 13:17:22,163 INFO L899 garLoopResultBuilder]: For program point L469-1(line 469) no Hoare annotation was computed. [2022-12-14 13:17:22,163 INFO L899 garLoopResultBuilder]: For program point bigMacCallFINAL(lines 464 474) no Hoare annotation was computed. [2022-12-14 13:17:22,163 INFO L899 garLoopResultBuilder]: For program point getCurrentFloorIDEXIT(lines 1953 1961) no Hoare annotation was computed. [2022-12-14 13:17:22,163 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1953 1961) the Hoare annotation is: true [2022-12-14 13:17:22,163 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1191 1218) the Hoare annotation is: (let ((.cse0 (not (= ~doorState~0 1)))) (and (or (not (= ~currentFloorID~0 4)) (= ~calls_4~0 |old(~calls_4~0)|) (not (= ~currentFloorID~0 ~executiveFloor~0)) .cse0) (or (not (= ~executiveFloor~0 4)) .cse0 (= ~calls_4~0 0) (not (= 0 |old(~calls_4~0)|))))) [2022-12-14 13:17:22,163 INFO L899 garLoopResultBuilder]: For program point resetCallOnFloorEXIT(lines 1191 1218) no Hoare annotation was computed. [2022-12-14 13:17:22,163 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1813 1844) the Hoare annotation is: true [2022-12-14 13:17:22,163 INFO L899 garLoopResultBuilder]: For program point enterElevatorEXIT(lines 1813 1844) no Hoare annotation was computed. [2022-12-14 13:17:22,163 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 2591 2617) the Hoare annotation is: true [2022-12-14 13:17:22,163 INFO L902 garLoopResultBuilder]: At program point L2598(line 2598) the Hoare annotation is: true [2022-12-14 13:17:22,163 INFO L902 garLoopResultBuilder]: At program point L2598-1(line 2598) the Hoare annotation is: true [2022-12-14 13:17:22,163 INFO L899 garLoopResultBuilder]: For program point stopRequestedAtCurrentFloor__wrappee__emptyEXIT(lines 2591 2617) no Hoare annotation was computed. [2022-12-14 13:17:22,163 INFO L899 garLoopResultBuilder]: For program point isExecutiveFloorCallingEXIT(lines 3235 3245) no Hoare annotation was computed. [2022-12-14 13:17:22,163 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 3235 3245) the Hoare annotation is: true [2022-12-14 13:17:22,163 INFO L902 garLoopResultBuilder]: At program point L3240(line 3240) the Hoare annotation is: true [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L3240-1(line 3240) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1427 1577) the Hoare annotation is: (let ((.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (= ~calls_4~0 |old(~calls_4~0)|))) (and (or .cse0 .cse1 (not (= ~doorState~0 1))) (or (not (= ~doorState~0 0)) .cse0 .cse1))) [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point initPersonOnFloorEXIT(lines 1427 1577) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2331(lines 2331 2336) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2166(lines 2166 2171) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L895 garLoopResultBuilder]: At program point L2398(line 2398) the Hoare annotation is: (or (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4)) (< 2 ~currentFloorID~0)) [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2398-1(line 2398) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2233-1(line 2233) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L895 garLoopResultBuilder]: At program point L2233(line 2233) the Hoare annotation is: (or (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4)) (not (< 1 ~currentFloorID~0))) [2022-12-14 13:17:22,164 INFO L895 garLoopResultBuilder]: At program point $Ultimate##94(lines 2395 2490) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4))) [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2383(lines 2383 2392) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2218(lines 2218 2227) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2400(lines 2400 2405) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2367(lines 2367 2379) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L895 garLoopResultBuilder]: At program point $Ultimate##82(lines 2366 2492) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4))) [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2202(lines 2202 2214) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2235(lines 2235 2240) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2384(lines 2384 2389) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L899 garLoopResultBuilder]: For program point L2219(lines 2219 2224) no Hoare annotation was computed. [2022-12-14 13:17:22,164 INFO L895 garLoopResultBuilder]: At program point $Ultimate##88(lines 2382 2491) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4))) [2022-12-14 13:17:22,164 INFO L895 garLoopResultBuilder]: At program point $Ultimate##76(lines 2353 2493) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4))) [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2369-1(line 2369) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L895 garLoopResultBuilder]: At program point L2369(line 2369) the Hoare annotation is: (or (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4)) (< 1 ~currentFloorID~0)) [2022-12-14 13:17:22,165 INFO L895 garLoopResultBuilder]: At program point L2204(line 2204) the Hoare annotation is: (or (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4)) (not (< 0 ~currentFloorID~0))) [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2204-1(line 2204) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L902 garLoopResultBuilder]: At program point $Ultimate##62(lines 2304 2320) the Hoare annotation is: true [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2337(lines 2337 2494) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2172(lines 2172 2329) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L902 garLoopResultBuilder]: At program point $Ultimate##50(lines 2275 2322) the Hoare annotation is: true [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2354(lines 2354 2363) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2189(lines 2189 2198) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L902 garLoopResultBuilder]: At program point $Ultimate##56(lines 2288 2321) the Hoare annotation is: true [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2338(lines 2338 2350) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2371(lines 2371 2376) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2206(lines 2206 2211) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2173(lines 2173 2185) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2454(lines 2454 2466) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2355(lines 2355 2360) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2289(lines 2289 2301) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2190(lines 2190 2195) no Hoare annotation was computed. [2022-12-14 13:17:22,165 INFO L902 garLoopResultBuilder]: At program point $Ultimate##44(lines 2259 2323) the Hoare annotation is: true [2022-12-14 13:17:22,165 INFO L902 garLoopResultBuilder]: At program point $Ultimate##38(lines 2246 2324) the Hoare annotation is: true [2022-12-14 13:17:22,165 INFO L902 garLoopResultBuilder]: At program point $Ultimate##32(lines 2230 2325) the Hoare annotation is: true [2022-12-14 13:17:22,165 INFO L895 garLoopResultBuilder]: At program point L2340(line 2340) the Hoare annotation is: (or (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4)) (< 0 ~currentFloorID~0)) [2022-12-14 13:17:22,165 INFO L899 garLoopResultBuilder]: For program point L2340-1(line 2340) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2175-1(line 2175) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L895 garLoopResultBuilder]: At program point L2175(line 2175) the Hoare annotation is: (let ((.cse0 (not (= ~doorState~0 0))) (.cse1 (not (= ~executiveFloor~0 4)))) (and (or .cse0 .cse1 (not (< 0 ~currentFloorID~0))) (or (not (= ~currentFloorID~0 0)) .cse0 .cse1))) [2022-12-14 13:17:22,166 INFO L895 garLoopResultBuilder]: At program point L2456(line 2456) the Hoare annotation is: (let ((.cse0 (not (= ~doorState~0 0))) (.cse1 (not (= ~executiveFloor~0 4)))) (and (or .cse0 .cse1 (<= 4 ~currentFloorID~0)) (or .cse0 .cse1 (not (= ~currentFloorID~0 4))))) [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2456-1(line 2456) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2291-1(line 2291) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L895 garLoopResultBuilder]: At program point L2291(line 2291) the Hoare annotation is: (or (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4)) (<= ~currentFloorID~0 3)) [2022-12-14 13:17:22,166 INFO L902 garLoopResultBuilder]: At program point $Ultimate##26(lines 2217 2326) the Hoare annotation is: true [2022-12-14 13:17:22,166 INFO L902 garLoopResultBuilder]: At program point $Ultimate##20(lines 2201 2327) the Hoare annotation is: true [2022-12-14 13:17:22,166 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 2499 2527) the Hoare annotation is: true [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2441(lines 2441 2450) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2342(lines 2342 2347) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L902 garLoopResultBuilder]: At program point $Ultimate##14(lines 2188 2328) the Hoare annotation is: true [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2276(lines 2276 2285) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2177(lines 2177 2182) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2458(lines 2458 2463) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2425(lines 2425 2437) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2260(lines 2260 2272) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2293(lines 2293 2298) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L902 garLoopResultBuilder]: At program point L2508(line 2508) the Hoare annotation is: true [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2442(lines 2442 2447) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2508-1(line 2508) no Hoare annotation was computed. [2022-12-14 13:17:22,166 INFO L899 garLoopResultBuilder]: For program point L2277(lines 2277 2282) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2162(lines 2162 2495) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2427-1(line 2427) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L895 garLoopResultBuilder]: At program point L2427(line 2427) the Hoare annotation is: (or (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4)) (<= 4 ~currentFloorID~0)) [2022-12-14 13:17:22,167 INFO L895 garLoopResultBuilder]: At program point L2262(line 2262) the Hoare annotation is: (or (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4)) (<= ~currentFloorID~0 2)) [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2262-1(line 2262) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2510(lines 2510 2524) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L895 garLoopResultBuilder]: At program point $Ultimate##100(lines 2411 2489) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4))) [2022-12-14 13:17:22,167 INFO L895 garLoopResultBuilder]: At program point $Ultimate##106(lines 2424 2488) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4))) [2022-12-14 13:17:22,167 INFO L902 garLoopResultBuilder]: At program point L2164(line 2164) the Hoare annotation is: true [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point stopRequestedInDirectionFINAL(lines 2499 2527) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2164-1(line 2164) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2412(lines 2412 2421) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2247(lines 2247 2256) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L895 garLoopResultBuilder]: At program point $Ultimate##112(lines 2440 2487) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4))) [2022-12-14 13:17:22,167 INFO L895 garLoopResultBuilder]: At program point $Ultimate##118(lines 2453 2486) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4))) [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2396(lines 2396 2408) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2429(lines 2429 2434) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2264(lines 2264 2269) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2231(lines 2231 2243) no Hoare annotation was computed. [2022-12-14 13:17:22,167 INFO L902 garLoopResultBuilder]: At program point L2512(line 2512) the Hoare annotation is: true [2022-12-14 13:17:22,167 INFO L899 garLoopResultBuilder]: For program point L2512-1(line 2512) no Hoare annotation was computed. [2022-12-14 13:17:22,168 INFO L899 garLoopResultBuilder]: For program point L2413(lines 2413 2418) no Hoare annotation was computed. [2022-12-14 13:17:22,168 INFO L899 garLoopResultBuilder]: For program point L2248(lines 2248 2253) no Hoare annotation was computed. [2022-12-14 13:17:22,168 INFO L899 garLoopResultBuilder]: For program point stopRequestedInDirectionEXIT(lines 2499 2527) no Hoare annotation was computed. [2022-12-14 13:17:22,168 INFO L902 garLoopResultBuilder]: At program point stopRequestedInDirection__wrappee__empty_returnLabel#1(lines 2147 2498) the Hoare annotation is: true [2022-12-14 13:17:22,168 INFO L895 garLoopResultBuilder]: At program point $Ultimate##124(lines 2469 2485) the Hoare annotation is: (or (not (= ~currentFloorID~0 0)) (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4))) [2022-12-14 13:17:22,168 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 1578 1728) the Hoare annotation is: (let ((.cse0 (not (= ~doorState~0 1)))) (and (or (not (= ~currentFloorID~0 4)) (= ~calls_4~0 |old(~calls_4~0)|) (not (= ~currentFloorID~0 ~executiveFloor~0)) .cse0) (or (not (= ~executiveFloor~0 4)) .cse0 (= ~calls_4~0 0) (not (= 0 |old(~calls_4~0)|))))) [2022-12-14 13:17:22,168 INFO L895 garLoopResultBuilder]: At program point L1690-1(lines 1582 1722) the Hoare annotation is: (let ((.cse0 (not (= ~doorState~0 1)))) (and (or (not (= ~currentFloorID~0 4)) (= ~calls_4~0 |old(~calls_4~0)|) (not (= ~currentFloorID~0 ~executiveFloor~0)) .cse0) (or (not (= ~executiveFloor~0 4)) .cse0 (= ~calls_4~0 0) (not (= 0 |old(~calls_4~0)|))))) [2022-12-14 13:17:22,168 INFO L899 garLoopResultBuilder]: For program point removePersonFromFloorFINAL(lines 1578 1728) no Hoare annotation was computed. [2022-12-14 13:17:22,168 INFO L899 garLoopResultBuilder]: For program point removePersonFromFloorEXIT(lines 1578 1728) no Hoare annotation was computed. [2022-12-14 13:17:22,168 INFO L895 garLoopResultBuilder]: At program point L415(line 415) the Hoare annotation is: (let ((.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (= ~calls_4~0 |old(~calls_4~0)|))) (and (or .cse0 .cse1 (not (= ~doorState~0 1))) (or (not (= ~doorState~0 0)) .cse0 .cse1))) [2022-12-14 13:17:22,168 INFO L895 garLoopResultBuilder]: At program point L414(line 414) the Hoare annotation is: (let ((.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (= ~calls_4~0 |old(~calls_4~0)|))) (and (or .cse0 .cse1 (not (= ~doorState~0 1))) (or (not (= ~doorState~0 0)) .cse0 .cse1))) [2022-12-14 13:17:22,168 INFO L899 garLoopResultBuilder]: For program point L414-1(line 414) no Hoare annotation was computed. [2022-12-14 13:17:22,168 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 409 419) the Hoare annotation is: (let ((.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (= ~calls_4~0 |old(~calls_4~0)|))) (and (or .cse0 .cse1 (not (= ~doorState~0 1))) (or (not (= ~doorState~0 0)) .cse0 .cse1))) [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point bobCallFINAL(lines 409 419) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point bobCallEXIT(lines 409 419) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point getReverseHeadingEXIT(lines 2649 2662) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 2649 2662) the Hoare annotation is: true [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point getOriginEXIT(lines 237 275) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 237 275) the Hoare annotation is: true [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point continueInDirectionEXIT(lines 2562 2590) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point L2577-2(lines 2565 2589) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 2562 2590) the Hoare annotation is: (let ((.cse0 (not (= ~doorState~0 0))) (.cse1 (not (= ~executiveFloor~0 4)))) (and (or .cse0 .cse1 (not (= |old(~currentFloorID~0)| 0)) (not (= |old(~currentHeading~0)| |continueInDirection_#in~dir|)) (= ~currentHeading~0 |continueInDirection_#in~dir|) (not (= |old(~currentHeading~0)| 1))) (or (= ~currentFloorID~0 |old(~currentFloorID~0)|) .cse0 .cse1))) [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point L2569-1(line 2569) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L895 garLoopResultBuilder]: At program point L2569(line 2569) the Hoare annotation is: (or (not (= ~doorState~0 0)) (not (= ~executiveFloor~0 4)) (and (= ~currentFloorID~0 |old(~currentFloorID~0)|) (= ~currentHeading~0 1) (= ~currentHeading~0 |continueInDirection_#in~dir|))) [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point L2567(lines 2567 2582) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1897 1924) the Hoare annotation is: true [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point pressInLiftFloorButtonEXIT(lines 1897 1924) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1877 1896) the Hoare annotation is: true [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point leaveElevatorEXIT(lines 1877 1896) no Hoare annotation was computed. [2022-12-14 13:17:22,169 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 488 533) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L895 garLoopResultBuilder]: At program point L2108(line 2108) the Hoare annotation is: (let ((.cse6 (= ~calls_4~0 0))) (let ((.cse4 (= ~executiveFloor~0 4)) (.cse7 (or (= ~calls_4~0 |old(~calls_4~0)|) .cse6)) (.cse5 (= ~doorState~0 1))) (let ((.cse0 (and .cse7 (= ~currentFloorID~0 ~executiveFloor~0) (= ~currentFloorID~0 4) .cse5)) (.cse1 (not .cse4)) (.cse2 (and .cse4 .cse7 (= ~doorState~0 0))) (.cse3 (and .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse1 .cse2 (not (= |old(~doorState~0)| 1)) .cse3))))) [2022-12-14 13:17:22,170 INFO L895 garLoopResultBuilder]: At program point L2075(line 2075) the Hoare annotation is: (let ((.cse6 (= ~calls_4~0 0))) (let ((.cse4 (= ~executiveFloor~0 4)) (.cse7 (or (= ~calls_4~0 |old(~calls_4~0)|) .cse6)) (.cse5 (= ~doorState~0 1))) (let ((.cse0 (and .cse7 (= ~currentFloorID~0 ~executiveFloor~0) (= ~currentFloorID~0 4) .cse5)) (.cse1 (not .cse4)) (.cse2 (and .cse4 .cse7 (= ~doorState~0 0))) (.cse3 (and .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse1 .cse2 (not (= |old(~doorState~0)| 1)) .cse3))))) [2022-12-14 13:17:22,170 INFO L895 garLoopResultBuilder]: At program point L506(line 506) the Hoare annotation is: (let ((.cse6 (= ~calls_4~0 0))) (let ((.cse4 (= ~executiveFloor~0 4)) (.cse7 (or (= ~calls_4~0 |old(~calls_4~0)|) .cse6)) (.cse5 (= ~doorState~0 1))) (let ((.cse0 (and .cse7 (= ~currentFloorID~0 ~executiveFloor~0) (= ~currentFloorID~0 4) .cse5)) (.cse1 (not .cse4)) (.cse2 (and .cse4 .cse7 (= ~doorState~0 0))) (.cse3 (and .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse1 .cse2 (not (= |old(~doorState~0)| 1)) .cse3))))) [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L2075-1(line 2075) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L2108-1(line 2108) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L506-1(line 506) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L2092(lines 2092 2123) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L895 garLoopResultBuilder]: At program point anyStopRequested_returnLabel#1(lines 2054 2133) the Hoare annotation is: (let ((.cse6 (= ~calls_4~0 0))) (let ((.cse4 (= ~executiveFloor~0 4)) (.cse7 (or (= ~calls_4~0 |old(~calls_4~0)|) .cse6)) (.cse5 (= ~doorState~0 1))) (let ((.cse0 (and .cse7 (= ~currentFloorID~0 ~executiveFloor~0) (= ~currentFloorID~0 4) .cse5)) (.cse1 (not .cse4)) (.cse2 (and .cse4 .cse7 (= ~doorState~0 0))) (.cse3 (and .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse1 .cse2 (not (= |old(~doorState~0)| 1)) .cse3))))) [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L2088(lines 2088 2124) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L2097-1(line 2097) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L895 garLoopResultBuilder]: At program point L2064(line 2064) the Hoare annotation is: (let ((.cse6 (= ~calls_4~0 0))) (let ((.cse4 (= ~executiveFloor~0 4)) (.cse7 (or (= ~calls_4~0 |old(~calls_4~0)|) .cse6)) (.cse5 (= ~doorState~0 1))) (let ((.cse0 (and .cse7 (= ~currentFloorID~0 ~executiveFloor~0) (= ~currentFloorID~0 4) .cse5)) (.cse1 (not .cse4)) (.cse2 (and .cse4 .cse7 (= ~doorState~0 0))) (.cse3 (and .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse1 .cse2 (not (= |old(~doorState~0)| 1)) .cse3))))) [2022-12-14 13:17:22,170 INFO L895 garLoopResultBuilder]: At program point L2097(line 2097) the Hoare annotation is: (let ((.cse6 (= ~calls_4~0 0))) (let ((.cse4 (= ~executiveFloor~0 4)) (.cse7 (or (= ~calls_4~0 |old(~calls_4~0)|) .cse6)) (.cse5 (= ~doorState~0 1))) (let ((.cse0 (and .cse7 (= ~currentFloorID~0 ~executiveFloor~0) (= ~currentFloorID~0 4) .cse5)) (.cse1 (not .cse4)) (.cse2 (and .cse4 .cse7 (= ~doorState~0 0))) (.cse3 (and .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse1 .cse2 (not (= |old(~doorState~0)| 1)) .cse3))))) [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L2064-1(line 2064) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L895 garLoopResultBuilder]: At program point L524(line 524) the Hoare annotation is: (let ((.cse6 (= ~calls_4~0 0))) (let ((.cse4 (= ~executiveFloor~0 4)) (.cse7 (or (= ~calls_4~0 |old(~calls_4~0)|) .cse6)) (.cse5 (= ~doorState~0 1))) (let ((.cse0 (and .cse7 (= ~currentFloorID~0 ~executiveFloor~0) (= ~currentFloorID~0 4) .cse5)) (.cse1 (not .cse4)) (.cse2 (and .cse4 .cse7 (= ~doorState~0 0))) (.cse3 (and .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse1 .cse2 (not (= |old(~doorState~0)| 1)) .cse3))))) [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L524-1(line 524) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L520(lines 520 526) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L2081(lines 2081 2125) no Hoare annotation was computed. [2022-12-14 13:17:22,170 INFO L899 garLoopResultBuilder]: For program point L2077(lines 2077 2126) no Hoare annotation was computed. [2022-12-14 13:17:22,171 INFO L899 garLoopResultBuilder]: For program point L508(lines 508 512) no Hoare annotation was computed. [2022-12-14 13:17:22,171 INFO L899 garLoopResultBuilder]: For program point L504(lines 504 515) no Hoare annotation was computed. [2022-12-14 13:17:22,171 INFO L895 garLoopResultBuilder]: At program point L500-2(lines 500 528) the Hoare annotation is: (let ((.cse6 (= ~calls_4~0 0))) (let ((.cse4 (= ~executiveFloor~0 4)) (.cse7 (or (= ~calls_4~0 |old(~calls_4~0)|) .cse6)) (.cse5 (= ~doorState~0 1))) (let ((.cse0 (and .cse7 (= ~currentFloorID~0 ~executiveFloor~0) (= ~currentFloorID~0 4) .cse5)) (.cse1 (not .cse4)) (.cse2 (and .cse4 .cse7 (= ~doorState~0 0))) (.cse3 (and .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse1 .cse2 (not (= |old(~doorState~0)| 1)) .cse3))))) [2022-12-14 13:17:22,171 INFO L902 garLoopResultBuilder]: At program point L529(lines 488 533) the Hoare annotation is: true [2022-12-14 13:17:22,171 INFO L895 garLoopResultBuilder]: At program point L496(line 496) the Hoare annotation is: (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse3 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse0 (not (= |old(~doorState~0)| 0)) (and .cse2 (= ~doorState~0 0) .cse3)) (or (and .cse2 .cse3 (= ~doorState~0 1)) .cse0 .cse1))) [2022-12-14 13:17:22,171 INFO L899 garLoopResultBuilder]: For program point L496-1(line 496) no Hoare annotation was computed. [2022-12-14 13:17:22,171 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 488 533) the Hoare annotation is: (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse3 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse0 (not (= |old(~doorState~0)| 0)) (and .cse2 (= ~doorState~0 0) .cse3)) (or (and .cse2 .cse3 (= ~doorState~0 1)) .cse0 .cse1))) [2022-12-14 13:17:22,171 INFO L895 garLoopResultBuilder]: At program point L2086(line 2086) the Hoare annotation is: (let ((.cse6 (= ~calls_4~0 0))) (let ((.cse4 (= ~executiveFloor~0 4)) (.cse7 (or (= ~calls_4~0 |old(~calls_4~0)|) .cse6)) (.cse5 (= ~doorState~0 1))) (let ((.cse0 (and .cse7 (= ~currentFloorID~0 ~executiveFloor~0) (= ~currentFloorID~0 4) .cse5)) (.cse1 (not .cse4)) (.cse2 (and .cse4 .cse7 (= ~doorState~0 0))) (.cse3 (and .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse1 .cse2 (not (= |old(~doorState~0)| 1)) .cse3))))) [2022-12-14 13:17:22,171 INFO L899 garLoopResultBuilder]: For program point L2086-1(line 2086) no Hoare annotation was computed. [2022-12-14 13:17:22,171 INFO L899 garLoopResultBuilder]: For program point L2070(lines 2070 2127) no Hoare annotation was computed. [2022-12-14 13:17:22,171 INFO L899 garLoopResultBuilder]: For program point L2103(lines 2103 2121) no Hoare annotation was computed. [2022-12-14 13:17:22,171 INFO L899 garLoopResultBuilder]: For program point L2066(lines 2066 2128) no Hoare annotation was computed. [2022-12-14 13:17:22,171 INFO L899 garLoopResultBuilder]: For program point L2099(lines 2099 2122) no Hoare annotation was computed. [2022-12-14 13:17:22,171 INFO L899 garLoopResultBuilder]: For program point L2876(line 2876) no Hoare annotation was computed. [2022-12-14 13:17:22,172 INFO L895 garLoopResultBuilder]: At program point L2843(line 2843) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,172 INFO L899 garLoopResultBuilder]: For program point L2744(line 2744) no Hoare annotation was computed. [2022-12-14 13:17:22,172 INFO L895 garLoopResultBuilder]: At program point L2711-1(line 2711) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,172 INFO L895 garLoopResultBuilder]: At program point L2711(line 2711) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,172 INFO L895 garLoopResultBuilder]: At program point stopRequestedAtCurrentFloor_returnLabel#1(lines 2618 2648) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse3 (= ~calls_4~0 0)) (.cse4 (not .cse10))) (let ((.cse8 (= ~doorState~0 1)) (.cse15 (let ((.cse18 (= ~executiveFloor~0 2)) (.cse19 (= ~executiveFloor~0 0)) (.cse17 (= ~executiveFloor~0 1)) (.cse16 (= ~executiveFloor~0 3))) (and (or .cse10 .cse16 .cse17 .cse18 .cse19) (let ((.cse20 (not .cse16)) (.cse21 (not .cse17)) (.cse22 (not .cse19)) (.cse23 (not .cse18))) (or (and .cse20 (not .cse3) .cse21 .cse22 .cse23) (and .cse4 (or (and .cse20 (or (and (or (and (not (= ~calls_2~0 0)) .cse22) (and (not (= ~calls_0~0 0)) .cse23)) .cse21) (and (not (= ~calls_1~0 0)) .cse22 .cse23))) (and (not (= ~calls_3~0 0)) .cse21 .cse22 .cse23))))))))) (let ((.cse0 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse9 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse11 (or .cse15 (= |isExecutiveFloorCalling_#res| 0))) (.cse12 (or .cse15 (= |isExecutiveFloorCalling_#t~ret129| 0))) (.cse1 (or (= ~doorState~0 0) .cse8)) (.cse2 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse13 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse15 (= |isFloorCalling_#res| 0))) (.cse14 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))) (let ((.cse5 (and .cse0 .cse9 .cse11 .cse12 .cse1 .cse2 (= ~currentFloorID~0 4) .cse13 .cse14)) (.cse7 (and .cse0 .cse10 .cse9 .cse11 (= |timeShift_stopRequestedAtCurrentFloor_#res#1| 0) .cse12 .cse1 .cse2 .cse13 .cse14 (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~executiveFloor~0)))) (.cse6 (not (= |old(~doorState~0)| 1)))) (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 .cse6 .cse7) (or .cse4 (and (= ~currentHeading~0 1) .cse8) (not (= |old(~currentFloorID~0)| 0)) .cse6 (not (= |old(~currentHeading~0)| 1))) (or .cse4 .cse5 (and .cse0 .cse9 .cse1 .cse2 .cse3) (not (= |old(~doorState~0)| 0)) .cse7) (or .cse9 .cse4 (= |old(~currentFloorID~0)| 4) .cse6))))))) [2022-12-14 13:17:22,172 INFO L899 garLoopResultBuilder]: For program point L2827(lines 2827 2833) no Hoare annotation was computed. [2022-12-14 13:17:22,172 INFO L899 garLoopResultBuilder]: For program point L2629-1(line 2629) no Hoare annotation was computed. [2022-12-14 13:17:22,172 INFO L895 garLoopResultBuilder]: At program point L2629(line 2629) the Hoare annotation is: (let ((.cse0 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse1 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse2 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse4 (not (= |old(~doorState~0)| 1))) (.cse3 (not (= ~executiveFloor~0 4))) (.cse5 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|)))) (and (or (and .cse0 .cse1 .cse2 (= ~doorState~0 1)) .cse3 .cse4) (or .cse3 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1))) (or .cse3 (and .cse0 .cse1 (= ~doorState~0 0) .cse2) .cse5) (or .cse3 .cse4 .cse6) (or .cse3 .cse5 .cse6))) [2022-12-14 13:17:22,172 INFO L899 garLoopResultBuilder]: For program point L2811-1(line 2811) no Hoare annotation was computed. [2022-12-14 13:17:22,173 INFO L895 garLoopResultBuilder]: At program point L2811(line 2811) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,173 INFO L899 garLoopResultBuilder]: For program point L2679-1(line 2679) no Hoare annotation was computed. [2022-12-14 13:17:22,173 INFO L895 garLoopResultBuilder]: At program point L2679(line 2679) the Hoare annotation is: (let ((.cse3 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse4 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse5 (= ~doorState~0 1)) (.cse6 (= ~calls_4~0 0))) (let ((.cse1 (let ((.cse9 (not .cse6))) (and .cse3 .cse8 .cse4 (or .cse9 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 4) .cse5 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse9 (= |isFloorCalling_#res| 0)) (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (or (= |isExecutiveFloorCalling_#res| 0) .cse9) (= |timeShift_processWaitingOnFloor_~floorID#1| 4)))) (.cse7 (not (= |old(~doorState~0)| 0))) (.cse0 (not (= ~executiveFloor~0 4))) (.cse2 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6)) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse7) (or (and .cse3 .cse8 .cse4 .cse5 .cse6) .cse0 .cse1 .cse7) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse2 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse8 .cse0 (= |old(~currentFloorID~0)| 4) .cse2)))) [2022-12-14 13:17:22,173 INFO L895 garLoopResultBuilder]: At program point L2894(line 2894) the Hoare annotation is: (let ((.cse8 (= ~executiveFloor~0 4))) (let ((.cse12 (= ~calls_4~0 0)) (.cse1 (not .cse8))) (let ((.cse19 (let ((.cse22 (= ~executiveFloor~0 2)) (.cse23 (= ~executiveFloor~0 0)) (.cse21 (= ~executiveFloor~0 1)) (.cse20 (= ~executiveFloor~0 3))) (and (or .cse8 .cse20 .cse21 .cse22 .cse23) (let ((.cse24 (not .cse20)) (.cse25 (not .cse21)) (.cse26 (not .cse23)) (.cse27 (not .cse22))) (or (and .cse24 (not .cse12) .cse25 .cse26 .cse27) (and .cse1 (or (and .cse24 (or (and (or (and (not (= ~calls_2~0 0)) .cse26) (and (not (= ~calls_0~0 0)) .cse27)) .cse25) (and (not (= ~calls_1~0 0)) .cse26 .cse27))) (and (not (= ~calls_3~0 0)) .cse25 .cse26 .cse27))))))))) (let ((.cse14 (or .cse19 (= |isExecutiveFloorCalling_#res| 0))) (.cse16 (or .cse19 (= |isExecutiveFloorCalling_#t~ret129| 0))) (.cse17 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse19 (= |isFloorCalling_#res| 0))) (.cse18 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0)) (.cse7 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_~tmp___9~2#1| 0)) (.cse15 (= |timeShift_~tmp___8~2#1| 0)) (.cse10 (= ~doorState~0 0)) (.cse11 (= ~calls_4~0 |old(~calls_4~0)|))) (let ((.cse2 (not (= |old(~doorState~0)| 0))) (.cse5 (= |old(~currentFloorID~0)| 4)) (.cse3 (and .cse7 .cse8 .cse13 .cse9 .cse15 .cse10 .cse11 .cse12)) (.cse0 (and .cse7 .cse8 .cse13 .cse14 .cse9 .cse15 (<= 4 ~currentFloorID~0) .cse16 .cse10 .cse11 .cse17 .cse18)) (.cse6 (and .cse7 .cse8 .cse13 .cse14 .cse9 .cse15 .cse16 .cse10 .cse11 .cse17 .cse18 (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~executiveFloor~0)))) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 (not (<= 4 |old(~currentFloorID~0)|)) .cse2 .cse3) (or .cse1 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1))) (or .cse1 .cse5 .cse6 .cse2 .cse3) (or .cse1 .cse5 .cse4 .cse3 (not (= 0 |old(~calls_4~0)|))) (or .cse0 .cse1 .cse6 .cse4 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12)))))))) [2022-12-14 13:17:22,173 INFO L899 garLoopResultBuilder]: For program point L2894-1(lines 2779 2898) no Hoare annotation was computed. [2022-12-14 13:17:22,173 INFO L899 garLoopResultBuilder]: For program point L2795(lines 2779 2869) no Hoare annotation was computed. [2022-12-14 13:17:22,173 INFO L895 garLoopResultBuilder]: At program point L2696(line 2696) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,173 INFO L895 garLoopResultBuilder]: At program point L2696-1(line 2696) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,173 INFO L899 garLoopResultBuilder]: For program point L2878(lines 2878 2897) no Hoare annotation was computed. [2022-12-14 13:17:22,173 INFO L899 garLoopResultBuilder]: For program point L2746(lines 2746 2755) no Hoare annotation was computed. [2022-12-14 13:17:22,173 INFO L899 garLoopResultBuilder]: For program point L2779(lines 2779 2898) no Hoare annotation was computed. [2022-12-14 13:17:22,174 INFO L895 garLoopResultBuilder]: At program point L2746-1(lines 2746 2755) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,174 INFO L895 garLoopResultBuilder]: At program point L335(lines 335 348) the Hoare annotation is: (let ((.cse12 (= ~executiveFloor~0 4))) (let ((.cse20 (= ~calls_4~0 0)) (.cse1 (not .cse12))) (let ((.cse22 (let ((.cse25 (= ~executiveFloor~0 2)) (.cse26 (= ~executiveFloor~0 0)) (.cse24 (= ~executiveFloor~0 1)) (.cse23 (= ~executiveFloor~0 3))) (and (or .cse12 .cse23 .cse24 .cse25 .cse26) (let ((.cse27 (not .cse23)) (.cse28 (not .cse24)) (.cse29 (not .cse26)) (.cse30 (not .cse25))) (or (and .cse27 (not .cse20) .cse28 .cse29 .cse30) (and .cse1 (or (and .cse27 (or (and (or (and (not (= ~calls_2~0 0)) .cse29) (and (not (= ~calls_0~0 0)) .cse30)) .cse28) (and (not (= ~calls_1~0 0)) .cse29 .cse30))) (and (not (= ~calls_3~0 0)) .cse28 .cse29 .cse30)))))))) (.cse21 (= ~currentFloorID~0 4)) (.cse10 (not (= |old(~currentFloorID~0)| 0)))) (let ((.cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= |timeShift_~tmp___9~2#1| 0)) (.cse14 (or (not .cse21) .cse10)) (.cse15 (or .cse22 (= |isExecutiveFloorCalling_#t~ret129| 0))) (.cse16 (= ~doorState~0 0)) (.cse17 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse18 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse22 (= |isFloorCalling_#res| 0))) (.cse19 (< 0 ~currentFloorID~0))) (let ((.cse5 (not (<= 4 |old(~currentFloorID~0)|))) (.cse6 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19)) (.cse4 (not (= 0 |old(~calls_4~0)|))) (.cse2 (not (= |old(~doorState~0)| 1))) (.cse9 (= |old(~currentFloorID~0)| 4)) (.cse0 (and (= ~currentFloorID~0 |old(~currentFloorID~0)|) (or .cse17 .cse20) (= ~currentFloorID~0 ~executiveFloor~0) (= |timeShift___utac_acc__Specification14_spec__1_~tmp___0~2#1| 1) .cse21 (= ~doorState~0 1) (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse20))) (.cse8 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~executiveFloor~0)))) (.cse3 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< 2 ~currentFloorID~0) .cse19)) (.cse7 (not (= |old(~doorState~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= |old(~currentFloorID~0)| ~executiveFloor~0))) (or .cse1 .cse2 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse5 .cse6 .cse2) (or .cse1 .cse7 .cse4) (or .cse1 .cse8 .cse9 .cse2) (or .cse1 .cse10 .cse2 (<= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 0) (not (= |old(~currentHeading~0)| 1))) (or .cse1 .cse8 .cse9 .cse7) (or .cse0 .cse1 .cse8 .cse3 .cse7))))))) [2022-12-14 13:17:22,174 INFO L895 garLoopResultBuilder]: At program point L2829(line 2829) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,174 INFO L899 garLoopResultBuilder]: For program point L2697(line 2697) no Hoare annotation was computed. [2022-12-14 13:17:22,174 INFO L899 garLoopResultBuilder]: For program point L2631(lines 2631 2639) no Hoare annotation was computed. [2022-12-14 13:17:22,174 INFO L899 garLoopResultBuilder]: For program point L2813(lines 2813 2819) no Hoare annotation was computed. [2022-12-14 13:17:22,174 INFO L895 garLoopResultBuilder]: At program point L2681-1(lines 2681 2690) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,174 INFO L899 garLoopResultBuilder]: For program point L2681(lines 2681 2690) no Hoare annotation was computed. [2022-12-14 13:17:22,174 INFO L899 garLoopResultBuilder]: For program point L2797-1(line 2797) no Hoare annotation was computed. [2022-12-14 13:17:22,175 INFO L895 garLoopResultBuilder]: At program point L2797(line 2797) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,175 INFO L895 garLoopResultBuilder]: At program point L2698(line 2698) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,175 INFO L899 garLoopResultBuilder]: For program point L2731(line 2731) no Hoare annotation was computed. [2022-12-14 13:17:22,175 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 191) no Hoare annotation was computed. [2022-12-14 13:17:22,175 INFO L895 garLoopResultBuilder]: At program point L2698-1(line 2698) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,175 INFO L895 garLoopResultBuilder]: At program point L2880(line 2880) the Hoare annotation is: (let ((.cse4 (= ~executiveFloor~0 4))) (let ((.cse3 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse10 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse5 (= |timeShift_~tmp___9~2#1| 0)) (.cse6 (= ~doorState~0 0)) (.cse7 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse8 (= ~calls_4~0 0)) (.cse0 (not .cse4))) (let ((.cse2 (let ((.cse11 (let ((.cse14 (= ~executiveFloor~0 2)) (.cse15 (= ~executiveFloor~0 0)) (.cse13 (= ~executiveFloor~0 1)) (.cse12 (= ~executiveFloor~0 3))) (and (or .cse4 .cse12 .cse13 .cse14 .cse15) (let ((.cse16 (not .cse12)) (.cse17 (not .cse13)) (.cse18 (not .cse15)) (.cse19 (not .cse14))) (or (and .cse16 (not .cse8) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse16 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse3 .cse4 .cse10 (or .cse11 (= |isExecutiveFloorCalling_#res| 0)) .cse5 (or .cse11 (= |isExecutiveFloorCalling_#t~ret129| 0)) .cse6 .cse7 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse11 (= |isFloorCalling_#res| 0)) (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0)))) (.cse9 (and .cse3 .cse4 .cse10 .cse5 .cse6 .cse7 .cse8)) (.cse1 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse0 .cse2 .cse1 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8)) (or .cse0 .cse9 .cse2 (not (= |old(~doorState~0)| 0))) (or .cse0 .cse9 (= |old(~currentFloorID~0)| 4) .cse1 (not (= 0 |old(~calls_4~0)|))))))) [2022-12-14 13:17:22,175 INFO L899 garLoopResultBuilder]: For program point L2781-1(lines 2779 2869) no Hoare annotation was computed. [2022-12-14 13:17:22,175 INFO L895 garLoopResultBuilder]: At program point L2748(line 2748) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,175 INFO L899 garLoopResultBuilder]: For program point L2781(lines 2781 2794) no Hoare annotation was computed. [2022-12-14 13:17:22,176 INFO L895 garLoopResultBuilder]: At program point L2748-1(line 2748) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,176 INFO L899 garLoopResultBuilder]: For program point L2633-1(line 2633) no Hoare annotation was computed. [2022-12-14 13:17:22,176 INFO L895 garLoopResultBuilder]: At program point L2633(line 2633) the Hoare annotation is: (let ((.cse7 (not (= 0 |old(~calls_4~0)|))) (.cse2 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse3 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse4 (= ~currentFloorID~0 4)) (.cse5 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0)) (.cse6 (not (= |old(~doorState~0)| 1))) (.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (not (= |old(~doorState~0)| 0)))) (and (or .cse0 .cse1 (and .cse2 (= ~doorState~0 0) .cse3 .cse4 .cse5)) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse7) (or (and .cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|) .cse3 .cse4 (= ~doorState~0 1) .cse5) .cse0 .cse6) (or .cse0 (= |old(~currentFloorID~0)| 4) .cse1))) [2022-12-14 13:17:22,176 INFO L895 garLoopResultBuilder]: At program point L2815(line 2815) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,176 INFO L899 garLoopResultBuilder]: For program point L2749(line 2749) no Hoare annotation was computed. [2022-12-14 13:17:22,176 INFO L895 garLoopResultBuilder]: At program point L2683-1(line 2683) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,176 INFO L895 garLoopResultBuilder]: At program point L2683(line 2683) the Hoare annotation is: (let ((.cse3 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse4 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse5 (= ~doorState~0 1)) (.cse6 (= ~calls_4~0 0))) (let ((.cse1 (let ((.cse9 (not .cse6))) (and .cse3 .cse8 .cse4 (or .cse9 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 4) .cse5 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse9 (= |isFloorCalling_#res| 0)) (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (or (= |isExecutiveFloorCalling_#res| 0) .cse9) (= |timeShift_processWaitingOnFloor_~floorID#1| 4)))) (.cse7 (not (= |old(~doorState~0)| 0))) (.cse0 (not (= ~executiveFloor~0 4))) (.cse2 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6)) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse7) (or (and .cse3 .cse8 .cse4 .cse5 .cse6) .cse0 .cse1 .cse7) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse2 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse8 .cse0 (= |old(~currentFloorID~0)| 4) .cse2)))) [2022-12-14 13:17:22,176 INFO L899 garLoopResultBuilder]: For program point L2799(lines 2799 2805) no Hoare annotation was computed. [2022-12-14 13:17:22,176 INFO L895 garLoopResultBuilder]: At program point L2733-1(lines 2733 2742) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,176 INFO L899 garLoopResultBuilder]: For program point L2733(lines 2733 2742) no Hoare annotation was computed. [2022-12-14 13:17:22,176 INFO L899 garLoopResultBuilder]: For program point L2783-1(line 2783) no Hoare annotation was computed. [2022-12-14 13:17:22,177 INFO L895 garLoopResultBuilder]: At program point L2750(line 2750) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,177 INFO L895 garLoopResultBuilder]: At program point L2783(line 2783) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,177 INFO L899 garLoopResultBuilder]: For program point L2684(line 2684) no Hoare annotation was computed. [2022-12-14 13:17:22,177 INFO L895 garLoopResultBuilder]: At program point L2750-1(line 2750) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,177 INFO L899 garLoopResultBuilder]: For program point L2718(line 2718) no Hoare annotation was computed. [2022-12-14 13:17:22,177 INFO L895 garLoopResultBuilder]: At program point L191(line 191) the Hoare annotation is: (let ((.cse0 (not (= ~executiveFloor~0 4)))) (and (or .cse0 (not (= |old(~doorState~0)| 0))) (or .cse0 (not (= |old(~doorState~0)| 1))))) [2022-12-14 13:17:22,177 INFO L895 garLoopResultBuilder]: At program point L2685-1(line 2685) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,177 INFO L895 garLoopResultBuilder]: At program point L2685(line 2685) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,178 INFO L895 garLoopResultBuilder]: At program point L2801(line 2801) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,178 INFO L895 garLoopResultBuilder]: At program point L2735-1(line 2735) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,178 INFO L895 garLoopResultBuilder]: At program point L2735(line 2735) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,178 INFO L895 garLoopResultBuilder]: At program point L2884(line 2884) the Hoare annotation is: (let ((.cse9 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse10 (= |timeShift_~tmp___8~2#1| 0)) (.cse1 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse12 (= ~executiveFloor~0 4)) (.cse2 (= |timeShift_~tmp___9~2#1| 0)) (.cse3 (= ~doorState~0 0)) (.cse4 (= ~calls_4~0 |old(~calls_4~0)|))) (let ((.cse5 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0)) (.cse7 (and .cse1 .cse12 .cse2 .cse3 .cse4 (= ~calls_4~0 0))) (.cse8 (not (= |old(~doorState~0)| 1))) (.cse11 (and .cse9 .cse10)) (.cse0 (not .cse12)) (.cse6 (not (= |old(~doorState~0)| 0)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse8 (not (= |old(~currentHeading~0)| 1))) (or .cse0 (and .cse1 .cse9 .cse2 .cse10 .cse3 .cse4 .cse5) .cse8 .cse7) (or .cse11 .cse0 (= |old(~currentFloorID~0)| 4) .cse8) (or .cse11 .cse0 .cse6)))) [2022-12-14 13:17:22,178 INFO L899 garLoopResultBuilder]: For program point L2851(lines 2851 2864) no Hoare annotation was computed. [2022-12-14 13:17:22,178 INFO L899 garLoopResultBuilder]: For program point L2884-1(line 2884) no Hoare annotation was computed. [2022-12-14 13:17:22,178 INFO L899 garLoopResultBuilder]: For program point L2785(lines 2785 2791) no Hoare annotation was computed. [2022-12-14 13:17:22,178 INFO L899 garLoopResultBuilder]: For program point L341(lines 341 347) no Hoare annotation was computed. [2022-12-14 13:17:22,178 INFO L899 garLoopResultBuilder]: For program point L2736(line 2736) no Hoare annotation was computed. [2022-12-14 13:17:22,178 INFO L899 garLoopResultBuilder]: For program point L2885-1(line 2885) no Hoare annotation was computed. [2022-12-14 13:17:22,178 INFO L895 garLoopResultBuilder]: At program point L2885(line 2885) the Hoare annotation is: (let ((.cse9 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse10 (= |timeShift_~tmp___8~2#1| 0)) (.cse1 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse12 (= ~executiveFloor~0 4)) (.cse2 (= |timeShift_~tmp___9~2#1| 0)) (.cse3 (= ~doorState~0 0)) (.cse4 (= ~calls_4~0 |old(~calls_4~0)|))) (let ((.cse5 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0)) (.cse7 (and .cse1 .cse12 .cse2 .cse3 .cse4 (= ~calls_4~0 0))) (.cse8 (not (= |old(~doorState~0)| 1))) (.cse11 (and .cse9 .cse10)) (.cse0 (not .cse12)) (.cse6 (not (= |old(~doorState~0)| 0)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse8 (not (= |old(~currentHeading~0)| 1))) (or .cse0 (and .cse1 .cse9 .cse2 .cse10 .cse3 .cse4 .cse5) .cse8 .cse7) (or .cse11 .cse0 (= |old(~currentFloorID~0)| 4) .cse8) (or .cse11 .cse0 .cse6)))) [2022-12-14 13:17:22,178 INFO L899 garLoopResultBuilder]: For program point L2720(lines 2720 2729) no Hoare annotation was computed. [2022-12-14 13:17:22,178 INFO L895 garLoopResultBuilder]: At program point L2720-1(lines 2720 2729) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,179 INFO L895 garLoopResultBuilder]: At program point L2737-1(line 2737) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,179 INFO L895 garLoopResultBuilder]: At program point L2737(line 2737) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,179 INFO L899 garLoopResultBuilder]: For program point L2853-1(line 2853) no Hoare annotation was computed. [2022-12-14 13:17:22,179 INFO L895 garLoopResultBuilder]: At program point L2853(line 2853) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,179 INFO L895 garLoopResultBuilder]: At program point L2787(line 2787) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,179 INFO L895 garLoopResultBuilder]: At program point L2870-2(lines 2870 2874) the Hoare annotation is: (let ((.cse3 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse4 (= |timeShift_~tmp___9~2#1| 0)) (.cse5 (= ~doorState~0 0)) (.cse6 (= ~calls_4~0 |old(~calls_4~0)|))) (let ((.cse2 (and .cse3 .cse8 .cse4 .cse5 .cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))) (.cse7 (= ~calls_4~0 0)) (.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse1 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (or .cse2 .cse0 (not (= |old(~doorState~0)| 0)) (and .cse3 .cse8 .cse4 .cse5 .cse6 .cse7)) (or .cse8 .cse0 (= |old(~currentFloorID~0)| 4) .cse1)))) [2022-12-14 13:17:22,179 INFO L899 garLoopResultBuilder]: For program point L2837(lines 2779 2869) no Hoare annotation was computed. [2022-12-14 13:17:22,179 INFO L899 garLoopResultBuilder]: For program point L2705(line 2705) no Hoare annotation was computed. [2022-12-14 13:17:22,179 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 2762 2904) the Hoare annotation is: (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse3 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse0 (not (= |old(~doorState~0)| 0)) (and .cse2 (= ~doorState~0 0) .cse3)) (or (and .cse2 .cse3 (= ~doorState~0 1)) .cse0 .cse1))) [2022-12-14 13:17:22,179 INFO L899 garLoopResultBuilder]: For program point L2887(lines 2887 2896) no Hoare annotation was computed. [2022-12-14 13:17:22,180 INFO L895 garLoopResultBuilder]: At program point L2722(line 2722) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,180 INFO L895 garLoopResultBuilder]: At program point L2722-1(line 2722) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,180 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 2762 2904) no Hoare annotation was computed. [2022-12-14 13:17:22,180 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse20 (= ~executiveFloor~0 4))) (let ((.cse24 (= ~calls_4~0 0)) (.cse2 (not .cse20)) (.cse32 (= ~currentFloorID~0 4))) (let ((.cse30 (not .cse32)) (.cse17 (not (= |old(~currentFloorID~0)| 0))) (.cse33 (let ((.cse36 (= ~executiveFloor~0 2)) (.cse37 (= ~executiveFloor~0 0)) (.cse35 (= ~executiveFloor~0 1)) (.cse34 (= ~executiveFloor~0 3))) (and (or .cse20 .cse34 .cse35 .cse36 .cse37) (let ((.cse38 (not .cse34)) (.cse39 (not .cse35)) (.cse40 (not .cse37)) (.cse41 (not .cse36))) (or (and .cse38 (not .cse24) .cse39 .cse40 .cse41) (and .cse2 (or (and .cse38 (or (and (or (and (not (= ~calls_2~0 0)) .cse40) (and (not (= ~calls_0~0 0)) .cse41)) .cse39) (and (not (= ~calls_1~0 0)) .cse40 .cse41))) (and (not (= ~calls_3~0 0)) .cse39 .cse40 .cse41))))))))) (let ((.cse29 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse3 (= ~doorState~0 1)) (.cse19 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse25 (or .cse33 (= |isExecutiveFloorCalling_#res| 0))) (.cse21 (= |timeShift_~tmp___9~2#1| 0)) (.cse26 (or .cse30 .cse17)) (.cse27 (or .cse33 (= |isExecutiveFloorCalling_#t~ret129| 0))) (.cse22 (= ~doorState~0 0)) (.cse23 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse28 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse33 (= |isFloorCalling_#res| 0))) (.cse31 (< 0 ~currentFloorID~0))) (let ((.cse0 (and .cse19 .cse20 .cse25 .cse21 .cse26 .cse27 .cse22 .cse23 .cse28 (< 2 ~currentFloorID~0) .cse31)) (.cse8 (and .cse29 (or .cse23 .cse24) (= ~currentFloorID~0 ~executiveFloor~0) .cse32 .cse3 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse24))) (.cse14 (and .cse19 .cse20 .cse25 .cse21 .cse26 .cse27 .cse22 .cse23 .cse28 .cse31)) (.cse12 (and .cse21 .cse22 .cse24 .cse31)) (.cse13 (not (<= 4 |old(~currentFloorID~0)|))) (.cse4 (not (= |old(~doorState~0)| 0))) (.cse15 (and .cse19 .cse20 .cse29 (<= 4 ~currentFloorID~0) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse23 .cse3 .cse24)) (.cse1 (and .cse19 .cse20 .cse21 .cse26 .cse22 .cse23 .cse24)) (.cse10 (= |old(~currentFloorID~0)| 4)) (.cse11 (and .cse19 .cse20 .cse29 .cse30 .cse23 .cse3 .cse24)) (.cse5 (and .cse19 .cse20 .cse25 .cse21 .cse26 .cse27 .cse22 .cse23 .cse28 (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~executiveFloor~0)))) (.cse18 (not (= |old(~currentHeading~0)| 1))) (.cse6 (and .cse19 .cse20 .cse23 .cse3 .cse24)) (.cse7 (not (= |old(~doorState~0)| 1))) (.cse9 (and .cse19 .cse20 .cse21 .cse22 .cse23 .cse24)) (.cse16 (not (= 0 |old(~calls_4~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse6 .cse7 .cse8 (not (= |old(~currentFloorID~0)| ~executiveFloor~0)) .cse9) (or .cse1 .cse2 .cse10 .cse11 .cse4 .cse5) (or .cse12 .cse2 .cse13 .cse8 .cse14 .cse4 .cse15) (or .cse2 .cse6 .cse13 .cse7 .cse8 .cse14 .cse9) (or .cse12 .cse2 .cse13 .cse4 .cse15 .cse16) (or .cse1 .cse2 .cse10 .cse11 .cse7 .cse5) (or .cse2 .cse17 .cse7 .cse3 (<= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 0) .cse18 .cse9) (or .cse2 .cse17 .cse7 .cse18 .cse9 (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)) .cse16) (or .cse2 .cse6 .cse7 .cse9 .cse16))))))) [2022-12-14 13:17:22,180 INFO L899 garLoopResultBuilder]: For program point L328-1(line 328) no Hoare annotation was computed. [2022-12-14 13:17:22,180 INFO L899 garLoopResultBuilder]: For program point L2855(lines 2855 2861) no Hoare annotation was computed. [2022-12-14 13:17:22,181 INFO L899 garLoopResultBuilder]: For program point L2723(line 2723) no Hoare annotation was computed. [2022-12-14 13:17:22,181 INFO L899 garLoopResultBuilder]: For program point L2839-1(line 2839) no Hoare annotation was computed. [2022-12-14 13:17:22,181 INFO L895 garLoopResultBuilder]: At program point L2839(line 2839) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,181 INFO L895 garLoopResultBuilder]: At program point L2707-1(lines 2707 2716) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,181 INFO L899 garLoopResultBuilder]: For program point L2707(lines 2707 2716) no Hoare annotation was computed. [2022-12-14 13:17:22,181 INFO L899 garLoopResultBuilder]: For program point L2889-1(line 2889) no Hoare annotation was computed. [2022-12-14 13:17:22,182 INFO L895 garLoopResultBuilder]: At program point L2889(line 2889) the Hoare annotation is: (let ((.cse9 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse10 (= |timeShift_~tmp___8~2#1| 0)) (.cse1 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse12 (= ~executiveFloor~0 4)) (.cse2 (= |timeShift_~tmp___9~2#1| 0)) (.cse3 (= ~doorState~0 0)) (.cse4 (= ~calls_4~0 |old(~calls_4~0)|))) (let ((.cse5 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0)) (.cse7 (and .cse1 .cse12 .cse2 .cse3 .cse4 (= ~calls_4~0 0))) (.cse8 (not (= |old(~doorState~0)| 1))) (.cse11 (and .cse9 .cse10)) (.cse0 (not .cse12)) (.cse6 (not (= |old(~doorState~0)| 0)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse8 (not (= |old(~currentHeading~0)| 1))) (or .cse0 (and .cse1 .cse9 .cse2 .cse10 .cse3 .cse4 .cse5) .cse8 .cse7) (or .cse11 .cse0 (= |old(~currentFloorID~0)| 4) .cse8) (or .cse11 .cse0 .cse6)))) [2022-12-14 13:17:22,182 INFO L899 garLoopResultBuilder]: For program point L2823(lines 2779 2869) no Hoare annotation was computed. [2022-12-14 13:17:22,182 INFO L895 garLoopResultBuilder]: At program point L2724(line 2724) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,182 INFO L895 garLoopResultBuilder]: At program point L2757(lines 2663 2761) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,182 INFO L895 garLoopResultBuilder]: At program point L2724-1(line 2724) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,182 INFO L899 garLoopResultBuilder]: For program point L2625-1(line 2625) no Hoare annotation was computed. [2022-12-14 13:17:22,182 INFO L895 garLoopResultBuilder]: At program point L2625(line 2625) the Hoare annotation is: (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse3 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse0 (not (= |old(~doorState~0)| 0)) (and .cse2 (= ~doorState~0 0) .cse3)) (or (and .cse2 .cse3 (= ~doorState~0 1)) .cse0 .cse1))) [2022-12-14 13:17:22,182 INFO L895 garLoopResultBuilder]: At program point L2642(line 2642) the Hoare annotation is: (let ((.cse5 (not (= |old(~doorState~0)| 0))) (.cse6 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not (= ~executiveFloor~0 4))) (.cse1 (not (= |old(~doorState~0)| 1))) (.cse2 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse3 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse4 (= ~calls_4~0 0))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse0 (and .cse2 (= ~doorState~0 0) .cse3 .cse4) .cse5) (or .cse6 .cse0 .cse5) (or .cse6 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse1 (and .cse2 .cse3 (= ~doorState~0 1) .cse4)))) [2022-12-14 13:17:22,182 INFO L899 garLoopResultBuilder]: For program point L2642-1(line 2642) no Hoare annotation was computed. [2022-12-14 13:17:22,183 INFO L895 garLoopResultBuilder]: At program point L2890(line 2890) the Hoare annotation is: (let ((.cse8 (= ~executiveFloor~0 4))) (let ((.cse12 (= ~calls_4~0 0)) (.cse1 (not .cse8))) (let ((.cse19 (let ((.cse22 (= ~executiveFloor~0 2)) (.cse23 (= ~executiveFloor~0 0)) (.cse21 (= ~executiveFloor~0 1)) (.cse20 (= ~executiveFloor~0 3))) (and (or .cse8 .cse20 .cse21 .cse22 .cse23) (let ((.cse24 (not .cse20)) (.cse25 (not .cse21)) (.cse26 (not .cse23)) (.cse27 (not .cse22))) (or (and .cse24 (not .cse12) .cse25 .cse26 .cse27) (and .cse1 (or (and .cse24 (or (and (or (and (not (= ~calls_2~0 0)) .cse26) (and (not (= ~calls_0~0 0)) .cse27)) .cse25) (and (not (= ~calls_1~0 0)) .cse26 .cse27))) (and (not (= ~calls_3~0 0)) .cse25 .cse26 .cse27))))))))) (let ((.cse14 (or .cse19 (= |isExecutiveFloorCalling_#res| 0))) (.cse16 (or .cse19 (= |isExecutiveFloorCalling_#t~ret129| 0))) (.cse17 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse19 (= |isFloorCalling_#res| 0))) (.cse18 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0)) (.cse7 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_~tmp___9~2#1| 0)) (.cse15 (= |timeShift_~tmp___8~2#1| 0)) (.cse10 (= ~doorState~0 0)) (.cse11 (= ~calls_4~0 |old(~calls_4~0)|))) (let ((.cse2 (not (= |old(~doorState~0)| 0))) (.cse4 (= |old(~currentFloorID~0)| 4)) (.cse3 (and .cse7 .cse8 .cse13 .cse9 .cse15 .cse10 .cse11 .cse12)) (.cse0 (and .cse7 .cse8 .cse13 .cse14 .cse9 .cse15 (<= 4 ~currentFloorID~0) .cse16 .cse10 .cse11 .cse17 .cse18)) (.cse5 (and .cse7 .cse8 .cse13 .cse14 .cse9 .cse15 .cse16 .cse10 .cse11 .cse17 .cse18 (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~executiveFloor~0)))) (.cse6 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 (not (<= 4 |old(~currentFloorID~0)|)) .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse2 .cse3) (or .cse1 .cse4 .cse6 .cse3 (not (= 0 |old(~calls_4~0)|))) (or .cse0 .cse1 .cse5 .cse6 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12)))))))) [2022-12-14 13:17:22,183 INFO L899 garLoopResultBuilder]: For program point L330(lines 330 351) no Hoare annotation was computed. [2022-12-14 13:17:22,183 INFO L895 garLoopResultBuilder]: At program point L330-1(lines 320 354) the Hoare annotation is: (let ((.cse18 (= ~executiveFloor~0 4))) (let ((.cse16 (= ~calls_4~0 0)) (.cse1 (not .cse18))) (let ((.cse30 (let ((.cse33 (= ~executiveFloor~0 2)) (.cse34 (= ~executiveFloor~0 0)) (.cse32 (= ~executiveFloor~0 1)) (.cse31 (= ~executiveFloor~0 3))) (and (or .cse18 .cse31 .cse32 .cse33 .cse34) (let ((.cse35 (not .cse31)) (.cse36 (not .cse32)) (.cse37 (not .cse34)) (.cse38 (not .cse33))) (or (and .cse35 (not .cse16) .cse36 .cse37 .cse38) (and .cse1 (or (and .cse35 (or (and (or (and (not (= ~calls_2~0 0)) .cse37) (and (not (= ~calls_0~0 0)) .cse38)) .cse36) (and (not (= ~calls_1~0 0)) .cse37 .cse38))) (and (not (= ~calls_3~0 0)) .cse36 .cse37 .cse38)))))))) (.cse29 (= ~currentFloorID~0 4)) (.cse15 (not (= |old(~currentFloorID~0)| 0)))) (let ((.cse25 (= |timeShift___utac_acc__Specification14_spec__1_~tmp___2~0#1| 0)) (.cse24 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse26 (= ~doorState~0 1)) (.cse17 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse19 (= |timeShift_~tmp___9~2#1| 0)) (.cse27 (or (not .cse29) .cse15)) (.cse20 (or .cse30 (= |isExecutiveFloorCalling_#t~ret129| 0))) (.cse21 (= ~doorState~0 0)) (.cse22 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse23 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse30 (= |isFloorCalling_#res| 0))) (.cse28 (< 0 ~currentFloorID~0))) (let ((.cse9 (and .cse17 .cse18 .cse19 .cse27 .cse20 .cse21 .cse22 .cse23 .cse28)) (.cse2 (and .cse17 .cse18 .cse19 .cse27 .cse20 .cse21 .cse22 .cse23 (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~executiveFloor~0)))) (.cse8 (and .cse18 .cse24 (or .cse22 .cse16) .cse29 .cse26 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse16))) (.cse11 (and .cse17 .cse18 .cse19 .cse27 .cse20 .cse21 .cse22 .cse23 (< 2 ~currentFloorID~0) .cse28)) (.cse6 (not (<= 4 |old(~currentFloorID~0)|))) (.cse7 (and .cse17 .cse18 .cse25 .cse19 .cse27 .cse21 .cse22 .cse16 .cse28)) (.cse0 (and .cse17 .cse18 .cse25 .cse19 .cse27 .cse21 .cse22 .cse16)) (.cse3 (= |old(~currentFloorID~0)| 4)) (.cse12 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse17 .cse18 .cse24 .cse25 .cse22 .cse26 .cse16)) (.cse13 (and .cse17 .cse25 .cse19 .cse21 .cse22 .cse16)) (.cse5 (not (= |old(~doorState~0)| 0))) (.cse10 (and .cse17 .cse18 .cse25 .cse22 .cse26 .cse16)) (.cse14 (not (= 0 |old(~calls_4~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse7 .cse8 .cse9 .cse5 .cse10) (or .cse0 .cse1 .cse8 .cse2 .cse11 .cse5 .cse10) (or .cse1 .cse6 .cse8 .cse9 .cse12 .cse13 .cse10) (or .cse0 .cse1 .cse2 .cse3 .cse12 .cse10) (or .cse1 .cse12 .cse13 .cse10 .cse14) (or .cse1 .cse15 (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0) .cse16) .cse12 .cse13 (not (= |old(~currentHeading~0)| 1)) (and .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 (<= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 0))) (or .cse1 .cse8 .cse12 .cse11 .cse13 (not (= |old(~currentFloorID~0)| ~executiveFloor~0)) .cse10) (or .cse1 .cse6 .cse7 .cse5 (and .cse24 (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|)) .cse14) (or .cse0 .cse1 .cse3 .cse12 .cse4 .cse14) (or .cse1 .cse13 .cse5 .cse10 .cse14))))))) [2022-12-14 13:17:22,183 INFO L895 garLoopResultBuilder]: At program point L2857(line 2857) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,183 INFO L899 garLoopResultBuilder]: For program point L2692(line 2692) no Hoare annotation was computed. [2022-12-14 13:17:22,183 INFO L899 garLoopResultBuilder]: For program point L2841(lines 2841 2847) no Hoare annotation was computed. [2022-12-14 13:17:22,183 INFO L895 garLoopResultBuilder]: At program point L2709-1(line 2709) the Hoare annotation is: (let ((.cse10 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= ~executiveFloor~0 4)) (.cse11 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse14 (= ~currentFloorID~0 4)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse12 (= ~doorState~0 1)) (.cse9 (= ~calls_4~0 0))) (let ((.cse1 (= |old(~currentFloorID~0)| 4)) (.cse2 (and .cse10 .cse13 .cse11 (not .cse14) .cse8 .cse12 .cse9)) (.cse5 (and .cse10 .cse13 .cse8 .cse12 .cse9)) (.cse7 (and .cse11 (or .cse8 .cse9) (= ~currentFloorID~0 ~executiveFloor~0) .cse14 .cse12 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse9))) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse13)) (.cse4 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) .cse7 .cse3 (and (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse8 .cse9)) (or .cse0 .cse5 .cse4 .cse7) (or .cse0 (and .cse10 .cse11 .cse12) .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse4 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0)))))) [2022-12-14 13:17:22,184 INFO L895 garLoopResultBuilder]: At program point L2709(line 2709) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,184 INFO L899 garLoopResultBuilder]: For program point L2825-1(line 2825) no Hoare annotation was computed. [2022-12-14 13:17:22,184 INFO L895 garLoopResultBuilder]: At program point L2825(line 2825) the Hoare annotation is: (let ((.cse10 (= ~executiveFloor~0 4))) (let ((.cse2 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse0 (not .cse10)) (.cse6 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse9 (= ~doorState~0 1)) (.cse16 (= ~calls_4~0 0))) (let ((.cse1 (not (= |old(~doorState~0)| 1))) (.cse4 (and .cse6 .cse10 .cse8 .cse9 .cse16)) (.cse3 (not (= |old(~doorState~0)| 0))) (.cse5 (let ((.cse7 (let ((.cse13 (= ~executiveFloor~0 2)) (.cse14 (= ~executiveFloor~0 0)) (.cse12 (= ~executiveFloor~0 1)) (.cse11 (= ~executiveFloor~0 3))) (and (or .cse10 .cse11 .cse12 .cse13 .cse14) (let ((.cse15 (not .cse11)) (.cse17 (not .cse12)) (.cse18 (not .cse14)) (.cse19 (not .cse13))) (or (and .cse15 (not .cse16) .cse17 .cse18 .cse19) (and .cse0 (or (and .cse15 (or (and (or (and (not (= ~calls_2~0 0)) .cse18) (and (not (= ~calls_0~0 0)) .cse19)) .cse17) (and (not (= ~calls_1~0 0)) .cse18 .cse19))) (and (not (= ~calls_3~0 0)) .cse17 .cse18 .cse19))))))))) (and .cse6 .cse2 (or .cse7 (= |isExecutiveFloorCalling_#res| 0)) (or .cse7 (= |isExecutiveFloorCalling_#t~ret129| 0)) (= ~currentFloorID~0 ~executiveFloor~0) .cse8 (= ~currentFloorID~0 4) (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse7 (= |isFloorCalling_#res| 0)) .cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0))))) (and (or .cse0 (= ~currentHeading~0 1) (not (= |old(~currentFloorID~0)| 0)) .cse1 (not (= |old(~currentHeading~0)| 1))) (or .cse2 .cse0 .cse3) (or .cse0 .cse4 .cse1 .cse5) (or .cse2 .cse0 (= |old(~currentFloorID~0)| 4) .cse1) (or .cse0 .cse4 .cse3 .cse5))))) [2022-12-14 13:17:22,184 INFO L899 garLoopResultBuilder]: For program point L2627(lines 2627 2645) no Hoare annotation was computed. [2022-12-14 13:17:22,184 INFO L899 garLoopResultBuilder]: For program point L2809(lines 2779 2869) no Hoare annotation was computed. [2022-12-14 13:17:22,184 INFO L899 garLoopResultBuilder]: For program point L2710(line 2710) no Hoare annotation was computed. [2022-12-14 13:17:22,184 INFO L895 garLoopResultBuilder]: At program point L332(line 332) the Hoare annotation is: (let ((.cse12 (= ~executiveFloor~0 4))) (let ((.cse20 (= ~calls_4~0 0)) (.cse0 (not .cse12))) (let ((.cse22 (let ((.cse25 (= ~executiveFloor~0 2)) (.cse26 (= ~executiveFloor~0 0)) (.cse24 (= ~executiveFloor~0 1)) (.cse23 (= ~executiveFloor~0 3))) (and (or .cse12 .cse23 .cse24 .cse25 .cse26) (let ((.cse27 (not .cse23)) (.cse28 (not .cse24)) (.cse29 (not .cse26)) (.cse30 (not .cse25))) (or (and .cse27 (not .cse20) .cse28 .cse29 .cse30) (and .cse0 (or (and .cse27 (or (and (or (and (not (= ~calls_2~0 0)) .cse29) (and (not (= ~calls_0~0 0)) .cse30)) .cse28) (and (not (= ~calls_1~0 0)) .cse29 .cse30))) (and (not (= ~calls_3~0 0)) .cse28 .cse29 .cse30)))))))) (.cse21 (= ~currentFloorID~0 4)) (.cse10 (not (= |old(~currentFloorID~0)| 0)))) (let ((.cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= |timeShift_~tmp___9~2#1| 0)) (.cse14 (or (not .cse21) .cse10)) (.cse15 (or .cse22 (= |isExecutiveFloorCalling_#t~ret129| 0))) (.cse16 (= ~doorState~0 0)) (.cse17 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse18 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse22 (= |isFloorCalling_#res| 0))) (.cse19 (< 0 ~currentFloorID~0))) (let ((.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse8 (not (<= 4 |old(~currentFloorID~0)|))) (.cse9 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19)) (.cse1 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~executiveFloor~0)))) (.cse7 (= |old(~currentFloorID~0)| 4)) (.cse4 (not (= |old(~doorState~0)| 0))) (.cse5 (not (= |old(~doorState~0)| 1))) (.cse2 (and (= ~currentFloorID~0 |old(~currentFloorID~0)|) (or .cse17 .cse20) (= ~currentFloorID~0 ~executiveFloor~0) .cse21 (= ~doorState~0 1) (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse20))) (.cse3 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< 2 ~currentFloorID~0) .cse19))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6) (or .cse0 .cse4 .cse6) (or .cse0 .cse1 .cse7 .cse5) (or .cse0 .cse8 .cse9 .cse2 .cse4) (or .cse0 .cse8 .cse9 .cse5 .cse2) (or .cse0 .cse10 .cse5 (<= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 0) (not (= |old(~currentHeading~0)| 1))) (or .cse0 .cse1 .cse7 .cse4) (or .cse0 .cse5 .cse2 .cse3 (not (= |old(~currentFloorID~0)| ~executiveFloor~0))))))))) [2022-12-14 13:17:22,185 INFO L895 garLoopResultBuilder]: At program point L332-1(line 332) the Hoare annotation is: (let ((.cse12 (= ~executiveFloor~0 4))) (let ((.cse20 (= ~calls_4~0 0)) (.cse0 (not .cse12))) (let ((.cse22 (let ((.cse25 (= ~executiveFloor~0 2)) (.cse26 (= ~executiveFloor~0 0)) (.cse24 (= ~executiveFloor~0 1)) (.cse23 (= ~executiveFloor~0 3))) (and (or .cse12 .cse23 .cse24 .cse25 .cse26) (let ((.cse27 (not .cse23)) (.cse28 (not .cse24)) (.cse29 (not .cse26)) (.cse30 (not .cse25))) (or (and .cse27 (not .cse20) .cse28 .cse29 .cse30) (and .cse0 (or (and .cse27 (or (and (or (and (not (= ~calls_2~0 0)) .cse29) (and (not (= ~calls_0~0 0)) .cse30)) .cse28) (and (not (= ~calls_1~0 0)) .cse29 .cse30))) (and (not (= ~calls_3~0 0)) .cse28 .cse29 .cse30)))))))) (.cse21 (= ~currentFloorID~0 4)) (.cse10 (not (= |old(~currentFloorID~0)| 0)))) (let ((.cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse13 (= |timeShift_~tmp___9~2#1| 0)) (.cse14 (or (not .cse21) .cse10)) (.cse15 (or .cse22 (= |isExecutiveFloorCalling_#t~ret129| 0))) (.cse16 (= ~doorState~0 0)) (.cse17 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse18 (or (not (= |isFloorCalling_#in~floorID| ~executiveFloor~0)) .cse22 (= |isFloorCalling_#res| 0))) (.cse19 (< 0 ~currentFloorID~0))) (let ((.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse1 (not (<= 4 |old(~currentFloorID~0)|))) (.cse2 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19)) (.cse7 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~executiveFloor~0)))) (.cse8 (= |old(~currentFloorID~0)| 4)) (.cse4 (not (= |old(~doorState~0)| 0))) (.cse5 (not (= |old(~doorState~0)| 1))) (.cse3 (and (= ~executiveFloor~0 |timeShift___utac_acc__Specification14_spec__1_#t~ret12#1|) (= ~currentFloorID~0 |old(~currentFloorID~0)|) (or .cse17 .cse20) (= ~currentFloorID~0 ~executiveFloor~0) .cse21 (= ~doorState~0 1) (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse20))) (.cse9 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 (< 2 ~currentFloorID~0) .cse19))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6) (or .cse0 .cse4 .cse6) (or .cse0 .cse7 .cse8 .cse5) (or .cse0 .cse1 .cse2 .cse5 .cse3) (or .cse0 .cse7 .cse3 .cse9 .cse4) (or .cse0 .cse10 .cse5 (<= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| 0) (not (= |old(~currentHeading~0)| 1))) (or .cse0 .cse7 .cse8 .cse4) (or .cse0 .cse5 .cse3 .cse9 (not (= |old(~currentFloorID~0)| ~executiveFloor~0))))))))) [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L2694(lines 2694 2703) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L895 garLoopResultBuilder]: At program point L2694-1(lines 2694 2703) the Hoare annotation is: (let ((.cse7 (= ~currentFloorID~0 |old(~currentFloorID~0)|)) (.cse9 (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| ~calls_4~0)) (.cse8 (= ~executiveFloor~0 4)) (.cse10 (= ~calls_4~0 |old(~calls_4~0)|)) (.cse11 (= ~doorState~0 1)) (.cse12 (= ~calls_4~0 0))) (let ((.cse4 (and .cse9 .cse8 .cse10 .cse11 .cse12)) (.cse2 (and .cse8 .cse7 (or .cse10 .cse12) (= ~currentFloorID~0 4) .cse11 (= |timeShift_stopRequestedAtCurrentFloor_~tmp___0~9#1| ~currentFloorID~0) (= |timeShift_processWaitingOnFloor_~floorID#1| 4) (or (not (= |timeShift_stopRequestedAtCurrentFloor_~tmp~22#1| 0)) .cse12))) (.cse1 (not (= |old(~doorState~0)| 0))) (.cse3 (and .cse9 .cse8 .cse7 .cse10 .cse11 .cse12)) (.cse6 (not (= 0 |old(~calls_4~0)|))) (.cse0 (not .cse8)) (.cse5 (not (= |old(~doorState~0)| 1)))) (and (or .cse0 (not (<= 4 |old(~currentFloorID~0)|)) (<= 4 |timeShift_processWaitingOnFloor_~floorID#1|) .cse1) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse3 .cse6) (or .cse0 (not (= |old(~currentFloorID~0)| 0)) .cse5 (not (= |old(~currentHeading~0)| 1)) (and (= ~currentHeading~0 1) (= |timeShift_processWaitingOnFloor_~floorID#1| 0))) (or .cse7 .cse0 (= |old(~currentFloorID~0)| 4) .cse5)))) [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1383(lines 1383 1417) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1350(lines 1350 1418) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1317(lines 1317 1419) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1383-2(lines 1251 1421) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1284(lines 1284 1420) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1251(lines 1251 1421) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1400(lines 1400 1410) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1367(lines 1367 1377) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1334(lines 1334 1344) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1301(lines 1301 1311) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1268(lines 1268 1278) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1392(lines 1392 1412) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1359(lines 1359 1379) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1326(lines 1326 1346) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1293(lines 1293 1313) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1260(lines 1260 1280) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1247 1426) the Hoare annotation is: true [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1384(lines 1384 1414) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1351(lines 1351 1381) no Hoare annotation was computed. [2022-12-14 13:17:22,185 INFO L899 garLoopResultBuilder]: For program point L1318(lines 1318 1348) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1285(lines 1285 1315) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1252(lines 1252 1282) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1404(lines 1404 1409) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1371(lines 1371 1376) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1338(lines 1338 1343) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1305(lines 1305 1310) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1272(lines 1272 1277) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1396(lines 1396 1411) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1363(lines 1363 1378) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1330(lines 1330 1345) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1297(lines 1297 1312) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1264(lines 1264 1279) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1388(lines 1388 1413) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1355(lines 1355 1380) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1322(lines 1322 1347) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1289(lines 1289 1314) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point L1256(lines 1256 1281) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point isPersonOnFloorEXIT(lines 1247 1426) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point isPersonOnFloorFINAL(lines 1247 1426) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L895 garLoopResultBuilder]: At program point L481(line 481) the Hoare annotation is: (let ((.cse0 (= ~executiveFloor~0 4))) (or (and .cse0 (not (= ~currentFloorID~0 4)) (= ~doorState~0 1) (= ~calls_4~0 0)) (and .cse0 (= ~doorState~0 0)))) [2022-12-14 13:17:22,186 INFO L902 garLoopResultBuilder]: At program point L3264(lines 3256 3268) the Hoare annotation is: true [2022-12-14 13:17:22,186 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-14 13:17:22,186 INFO L895 garLoopResultBuilder]: At program point L692(lines 692 699) the Hoare annotation is: (and (= ~executiveFloor~0 4) (= ~currentHeading~0 1) (= ~doorState~0 1) (= ~currentFloorID~0 0) (= ~calls_4~0 0)) [2022-12-14 13:17:22,186 INFO L902 garLoopResultBuilder]: At program point L692-2(lines 692 699) the Hoare annotation is: true [2022-12-14 13:17:22,187 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(line -1) the Hoare annotation is: true [2022-12-14 13:17:22,187 INFO L895 garLoopResultBuilder]: At program point L482(lines 475 486) the Hoare annotation is: (let ((.cse0 (= ~executiveFloor~0 4))) (or (and .cse0 (= ~doorState~0 1)) (and .cse0 (= ~doorState~0 0)))) [2022-12-14 13:17:22,187 INFO L895 garLoopResultBuilder]: At program point L480(line 480) the Hoare annotation is: (and (= ~executiveFloor~0 4) (= ~currentHeading~0 1) (= ~doorState~0 1) (= ~currentFloorID~0 0)) [2022-12-14 13:17:22,187 INFO L895 garLoopResultBuilder]: At program point L480-1(line 480) the Hoare annotation is: (let ((.cse0 (= ~executiveFloor~0 4))) (or (and .cse0 (= ~currentHeading~0 1) (= ~doorState~0 1) (= ~currentFloorID~0 0) (= ~calls_4~0 0)) (and .cse0 (not (= ~currentFloorID~0 4)) (= ~doorState~0 0)))) [2022-12-14 13:17:22,187 INFO L895 garLoopResultBuilder]: At program point L3263-1(line 3263) the Hoare annotation is: (let ((.cse0 (= ~executiveFloor~0 4))) (or (and .cse0 (= ~doorState~0 1)) (and .cse0 (= ~doorState~0 0)))) [2022-12-14 13:17:22,187 INFO L895 garLoopResultBuilder]: At program point L3263(line 3263) the Hoare annotation is: (let ((.cse0 (= ~executiveFloor~0 4))) (or (and .cse0 (= ~doorState~0 1)) (and .cse0 (= ~doorState~0 0)))) [2022-12-14 13:17:22,187 INFO L899 garLoopResultBuilder]: For program point L3261-1(line 3261) no Hoare annotation was computed. [2022-12-14 13:17:22,187 INFO L895 garLoopResultBuilder]: At program point L3261(line 3261) the Hoare annotation is: (and (= ~executiveFloor~0 4) (= ~currentHeading~0 1) (= ~doorState~0 1) (= ~currentFloorID~0 0) (= ~calls_4~0 0)) [2022-12-14 13:17:22,187 INFO L899 garLoopResultBuilder]: For program point isFloorCallingEXIT(lines 1156 1190) no Hoare annotation was computed. [2022-12-14 13:17:22,187 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1156 1190) the Hoare annotation is: true [2022-12-14 13:17:22,187 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 1729 1737) the Hoare annotation is: true [2022-12-14 13:17:22,187 INFO L899 garLoopResultBuilder]: For program point isTopFloorEXIT(lines 1729 1737) no Hoare annotation was computed. [2022-12-14 13:17:22,189 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 13:17:22,191 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 13:17:22,265 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 01:17:22 BoogieIcfgContainer [2022-12-14 13:17:22,265 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 13:17:22,266 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 13:17:22,266 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 13:17:22,266 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 13:17:22,267 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 01:05:22" (3/4) ... [2022-12-14 13:17:22,269 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-14 13:17:22,274 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure removePersonFromFloor [2022-12-14 13:17:22,274 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure bobCall [2022-12-14 13:17:22,274 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getReverseHeading [2022-12-14 13:17:22,274 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getDestination [2022-12-14 13:17:22,274 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getOrigin [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure continueInDirection [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isBlocked [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure bigMacCall [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure getCurrentFloorID [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure resetCallOnFloor [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure pressInLiftFloorButton [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure leaveElevator [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure enterElevator [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure stopRequestedAtCurrentFloor__wrappee__empty [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPersonOnFloor [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isExecutiveFloorCalling [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure initPersonOnFloor [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure stopRequestedInDirection [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isFloorCalling [2022-12-14 13:17:22,275 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isTopFloor [2022-12-14 13:17:22,295 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 265 nodes and edges [2022-12-14 13:17:22,296 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-12-14 13:17:22,297 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 19 nodes and edges [2022-12-14 13:17:22,298 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-14 13:17:22,299 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-14 13:17:22,300 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-12-14 13:17:22,301 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-14 13:17:22,321 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(executiveFloor == 4) || calls_4 == \old(calls_4)) || !(doorState == 1)) && ((!(doorState == 0) || !(executiveFloor == 4)) || calls_4 == \old(calls_4)) [2022-12-14 13:17:22,322 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((calls_4 == \old(calls_4) || calls_4 == 0) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) || !(executiveFloor == 4)) || ((executiveFloor == 4 && (calls_4 == \old(calls_4) || calls_4 == 0)) && doorState == 0)) || ((executiveFloor == 4 && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 0)) && ((((((((calls_4 == \old(calls_4) || calls_4 == 0) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) || !(executiveFloor == 4)) || ((executiveFloor == 4 && (calls_4 == \old(calls_4) || calls_4 == 0)) && doorState == 0)) || !(\old(doorState) == 1)) || ((executiveFloor == 4 && doorState == 1) && calls_4 == 0)) [2022-12-14 13:17:22,324 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((tmp == calls_4 && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || ((((((((tmp == calls_4 && currentFloorID == \old(currentFloorID)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || \result == 0)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && currentFloorID == 4) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 == currentFloorID)) || !(\old(doorState) == 1)) || ((((((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || \result == 0)) && \result == 0) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 == currentFloorID) && !(tmp___0 == executiveFloor))) && ((((!(executiveFloor == 4) || (currentHeading == 1 && doorState == 1)) || !(\old(currentFloorID) == 0)) || !(\old(doorState) == 1)) || !(\old(currentHeading) == 1))) && ((((!(executiveFloor == 4) || ((((((((tmp == calls_4 && currentFloorID == \old(currentFloorID)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || \result == 0)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && currentFloorID == 4) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 == currentFloorID)) || ((((tmp == calls_4 && currentFloorID == \old(currentFloorID)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && calls_4 == 0)) || !(\old(doorState) == 0)) || ((((((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || \result == 0)) && \result == 0) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 == currentFloorID) && !(tmp___0 == executiveFloor)))) && (((currentFloorID == \old(currentFloorID) || !(executiveFloor == 4)) || \old(currentFloorID) == 4) || !(\old(doorState) == 1)) [2022-12-14 13:17:22,325 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || ((((((((executiveFloor == aux-getCurrentFloorID()-aux && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || !(\old(doorState) == 0)) && ((!(executiveFloor == 4) || !(\old(doorState) == 1)) || !(0 == \old(calls_4)))) && ((!(executiveFloor == 4) || !(\old(doorState) == 0)) || !(0 == \old(calls_4)))) && (((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 1))) && ((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 1)) || ((((((((executiveFloor == aux-getCurrentFloorID()-aux && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)))) && ((((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || ((((((((executiveFloor == aux-getCurrentFloorID()-aux && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(doorState) == 0))) && ((((!(executiveFloor == 4) || !(\old(currentFloorID) == 0)) || !(\old(doorState) == 1)) || tmp___0 <= 0) || !(\old(currentHeading) == 1))) && (((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 0))) && ((((!(executiveFloor == 4) || !(\old(doorState) == 1)) || ((((((((executiveFloor == aux-getCurrentFloorID()-aux && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(currentFloorID) == executiveFloor)) [2022-12-14 13:17:22,325 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || ((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 0)) && ((((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) && 0 < currentFloorID)) || (((((((executiveFloor == 4 && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && (((((((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || (((((((executiveFloor == 4 && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(doorState) == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && ((((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || (((((((executiveFloor == 4 && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 1)) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && ((((((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 1)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && ((((!(executiveFloor == 4) || !(\old(doorState) == 1)) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(0 == \old(calls_4)))) && ((((((!(executiveFloor == 4) || !(\old(currentFloorID) == 0)) || ((currentHeading == 1 && floorID == 0) && calls_4 == 0)) || !(\old(doorState) == 1)) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || !(\old(currentHeading) == 1)) || (((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 <= 0))) && ((((((!(executiveFloor == 4) || (((((((executiveFloor == 4 && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || !(\old(doorState) == 1)) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || !(\old(currentFloorID) == executiveFloor)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && (((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) && 0 < currentFloorID)) || !(\old(doorState) == 0)) || (currentFloorID == \old(currentFloorID) && 4 <= floorID)) || !(0 == \old(calls_4)))) && ((((((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || \old(currentFloorID) == 4) || !(\old(doorState) == 1)) || ((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(0 == \old(calls_4)))) && ((((!(executiveFloor == 4) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || !(\old(doorState) == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(0 == \old(calls_4))) [2022-12-14 13:17:22,327 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((calls_4 == \old(calls_4) || calls_4 == 0) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) || !(executiveFloor == 4)) || ((executiveFloor == 4 && (calls_4 == \old(calls_4) || calls_4 == 0)) && doorState == 0)) || ((executiveFloor == 4 && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 0)) && ((((((((calls_4 == \old(calls_4) || calls_4 == 0) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) || !(executiveFloor == 4)) || ((executiveFloor == 4 && (calls_4 == \old(calls_4) || calls_4 == 0)) && doorState == 0)) || !(\old(doorState) == 1)) || ((executiveFloor == 4 && doorState == 1) && calls_4 == 0)) [2022-12-14 13:17:22,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && tmp___0 == 1) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)) || !(executiveFloor == 4)) || !(\old(doorState) == 1)) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(currentFloorID) == executiveFloor)) && ((!(executiveFloor == 4) || !(\old(doorState) == 1)) || !(0 == \old(calls_4)))) && ((((((((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && tmp___0 == 1) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)) || !(executiveFloor == 4)) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 0))) && ((((((((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && tmp___0 == 1) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)) || !(executiveFloor == 4)) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 1))) && ((!(executiveFloor == 4) || !(\old(doorState) == 0)) || !(0 == \old(calls_4)))) && (((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 1))) && ((((!(executiveFloor == 4) || !(\old(currentFloorID) == 0)) || !(\old(doorState) == 1)) || tmp___0 <= 0) || !(\old(currentHeading) == 1))) && (((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 0))) && ((((((((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && tmp___0 == 1) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)) || !(executiveFloor == 4)) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(doorState) == 0)) [2022-12-14 13:17:22,330 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(executiveFloor == 4) || \old(currentFloorID) == 4) || ((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && !(currentFloorID == 4)) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 0)) && (((!(executiveFloor == 4) || \old(currentFloorID) == 4) || ((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && !(currentFloorID == 4)) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 1))) && (((!(executiveFloor == 4) || ((((tmp == calls_4 && executiveFloor == 4) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 1)) || !(0 == \old(calls_4)))) && ((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || (((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || !(\old(doorState) == 0)) || ((4 <= floorID && calls_4 == \old(calls_4)) && calls_4 == 0))) && (((!(executiveFloor == 4) || ((((tmp == calls_4 && executiveFloor == 4) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 1)) || (((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)))) && (((!(executiveFloor == 4) || ((tmp == calls_4 && currentFloorID == \old(currentFloorID)) && doorState == 1)) || !(\old(doorState) == 0)) || !(0 == \old(calls_4)))) && ((((!(executiveFloor == 4) || !(\old(currentFloorID) == 0)) || !(\old(doorState) == 1)) || !(\old(currentHeading) == 1)) || (currentHeading == 1 && floorID == 0)) [2022-12-14 13:17:22,332 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(executiveFloor == 4) || !(\old(doorState) == 0)) && (!(executiveFloor == 4) || !(\old(doorState) == 1)) [2022-12-14 13:17:22,381 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/witness.graphml [2022-12-14 13:17:22,381 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 13:17:22,381 INFO L158 Benchmark]: Toolchain (without parser) took 722150.51ms. Allocated memory was 134.2MB in the beginning and 1.5GB in the end (delta: 1.3GB). Free memory was 95.2MB in the beginning and 710.3MB in the end (delta: -615.1MB). Peak memory consumption was 729.0MB. Max. memory is 16.1GB. [2022-12-14 13:17:22,382 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 134.2MB. Free memory was 98.3MB in the beginning and 98.2MB in the end (delta: 29.7kB). There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 13:17:22,382 INFO L158 Benchmark]: CACSL2BoogieTranslator took 453.12ms. Allocated memory is still 134.2MB. Free memory was 95.2MB in the beginning and 54.6MB in the end (delta: 40.6MB). Peak memory consumption was 41.9MB. Max. memory is 16.1GB. [2022-12-14 13:17:22,382 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.57ms. Allocated memory is still 134.2MB. Free memory was 54.6MB in the beginning and 48.8MB in the end (delta: 5.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-14 13:17:22,382 INFO L158 Benchmark]: Boogie Preprocessor took 60.16ms. Allocated memory was 134.2MB in the beginning and 161.5MB in the end (delta: 27.3MB). Free memory was 48.8MB in the beginning and 129.1MB in the end (delta: -80.3MB). Peak memory consumption was 13.1MB. Max. memory is 16.1GB. [2022-12-14 13:17:22,382 INFO L158 Benchmark]: RCFGBuilder took 1285.97ms. Allocated memory is still 161.5MB. Free memory was 129.1MB in the beginning and 68.3MB in the end (delta: 60.8MB). Peak memory consumption was 80.7MB. Max. memory is 16.1GB. [2022-12-14 13:17:22,383 INFO L158 Benchmark]: TraceAbstraction took 720175.70ms. Allocated memory was 161.5MB in the beginning and 1.5GB in the end (delta: 1.3GB). Free memory was 67.2MB in the beginning and 733.3MB in the end (delta: -666.1MB). Peak memory consumption was 1.0GB. Max. memory is 16.1GB. [2022-12-14 13:17:22,383 INFO L158 Benchmark]: Witness Printer took 115.09ms. Allocated memory is still 1.5GB. Free memory was 733.3MB in the beginning and 710.3MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2022-12-14 13:17:22,384 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 134.2MB. Free memory was 98.3MB in the beginning and 98.2MB in the end (delta: 29.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 453.12ms. Allocated memory is still 134.2MB. Free memory was 95.2MB in the beginning and 54.6MB in the end (delta: 40.6MB). Peak memory consumption was 41.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.57ms. Allocated memory is still 134.2MB. Free memory was 54.6MB in the beginning and 48.8MB in the end (delta: 5.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 60.16ms. Allocated memory was 134.2MB in the beginning and 161.5MB in the end (delta: 27.3MB). Free memory was 48.8MB in the beginning and 129.1MB in the end (delta: -80.3MB). Peak memory consumption was 13.1MB. Max. memory is 16.1GB. * RCFGBuilder took 1285.97ms. Allocated memory is still 161.5MB. Free memory was 129.1MB in the beginning and 68.3MB in the end (delta: 60.8MB). Peak memory consumption was 80.7MB. Max. memory is 16.1GB. * TraceAbstraction took 720175.70ms. Allocated memory was 161.5MB in the beginning and 1.5GB in the end (delta: 1.3GB). Free memory was 67.2MB in the beginning and 733.3MB in the end (delta: -666.1MB). Peak memory consumption was 1.0GB. Max. memory is 16.1GB. * Witness Printer took 115.09ms. Allocated memory is still 1.5GB. Free memory was 733.3MB in the beginning and 710.3MB in the end (delta: 23.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 191]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 347 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 720.0s, OverallIterations: 21, TraceHistogramMax: 20, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.2s, AutomataDifference: 39.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 128.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 21308 SdHoareTripleChecker+Valid, 27.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 21136 mSDsluCounter, 62913 SdHoareTripleChecker+Invalid, 23.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 50249 mSDsCounter, 10985 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 65280 IncrementalHoareTripleChecker+Invalid, 76265 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 10985 mSolverCounterUnsat, 12664 mSDtfsCounter, 65280 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 7094 GetRequests, 5993 SyntacticMatches, 141 SemanticMatches, 960 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 53666 ImplicationChecksByTransitivity, 405.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=5982occurred in iteration=19, InterpolantAutomatonStates: 317, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.0s AutomataMinimizationTime, 21 MinimizatonAttempts, 1430 StatesRemovedByMinimization, 15 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 147 LocationsWithAnnotation, 41993 PreInvPairs, 69307 NumberOfFragments, 37951 HoareAnnotationTreeSize, 41993 FomulaSimplifications, 175996 FormulaSimplificationTreeSizeReduction, 84.7s HoareSimplificationTime, 147 FomulaSimplificationsInter, 6655890 FormulaSimplificationTreeSizeReductionInter, 42.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.9s SsaConstructionTime, 3.1s SatisfiabilityAnalysisTime, 38.1s InterpolantComputationTime, 8171 NumberOfCodeBlocks, 8171 NumberOfCodeBlocksAsserted, 36 NumberOfCheckSat, 9585 ConstructedInterpolants, 0 QuantifiedInterpolants, 17424 SizeOfPredicates, 84 NumberOfNonLiveVariables, 32308 ConjunctsInSsa, 169 ConjunctsInUnsatCore, 42 InterpolantComputations, 15 PerfectInterpolantSequences, 17165/17793 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: (((((((((((((((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || ((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 0)) && ((((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) && 0 < currentFloorID)) || (((((((executiveFloor == 4 && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && (((((((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || (((((((executiveFloor == 4 && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(doorState) == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && ((((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || (((((((executiveFloor == 4 && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 1)) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && ((((((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 1)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && ((((!(executiveFloor == 4) || !(\old(doorState) == 1)) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(0 == \old(calls_4)))) && ((((((!(executiveFloor == 4) || !(\old(currentFloorID) == 0)) || ((currentHeading == 1 && floorID == 0) && calls_4 == 0)) || !(\old(doorState) == 1)) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || !(\old(currentHeading) == 1)) || (((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 <= 0))) && ((((((!(executiveFloor == 4) || (((((((executiveFloor == 4 && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || !(\old(doorState) == 1)) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || !(\old(currentFloorID) == executiveFloor)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0))) && (((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) && 0 < currentFloorID)) || !(\old(doorState) == 0)) || (currentFloorID == \old(currentFloorID) && 4 <= floorID)) || !(0 == \old(calls_4)))) && ((((((((((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || \old(currentFloorID) == 4) || !(\old(doorState) == 1)) || ((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(0 == \old(calls_4)))) && ((((!(executiveFloor == 4) || (((((tmp == calls_4 && tmp___2 == 0) && tmp___9 == 0) && doorState == 0) && calls_4 == \old(calls_4)) && calls_4 == 0)) || !(\old(doorState) == 0)) || (((((tmp == calls_4 && executiveFloor == 4) && tmp___2 == 0) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(0 == \old(calls_4))) - InvariantResult [Line: 2230]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: (((executiveFloor == 4 && currentHeading == 1) && doorState == 1) && currentFloorID == 0) && calls_4 == 0 - InvariantResult [Line: 2188]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2395]: Loop Invariant Derived loop invariant: (!(currentFloorID == 0) || !(doorState == 0)) || !(executiveFloor == 4) - InvariantResult [Line: 2246]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2382]: Loop Invariant Derived loop invariant: (!(currentFloorID == 0) || !(doorState == 0)) || !(executiveFloor == 4) - InvariantResult [Line: 3256]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1877]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2288]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2304]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2440]: Loop Invariant Derived loop invariant: (!(currentFloorID == 0) || !(doorState == 0)) || !(executiveFloor == 4) - InvariantResult [Line: 2411]: Loop Invariant Derived loop invariant: (!(currentFloorID == 0) || !(doorState == 0)) || !(executiveFloor == 4) - InvariantResult [Line: 2217]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: (((((((((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || ((((((((executiveFloor == aux-getCurrentFloorID()-aux && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || !(\old(doorState) == 0)) && ((!(executiveFloor == 4) || !(\old(doorState) == 1)) || !(0 == \old(calls_4)))) && ((!(executiveFloor == 4) || !(\old(doorState) == 0)) || !(0 == \old(calls_4)))) && (((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 1))) && ((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 1)) || ((((((((executiveFloor == aux-getCurrentFloorID()-aux && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)))) && ((((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || ((((((((executiveFloor == aux-getCurrentFloorID()-aux && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(doorState) == 0))) && ((((!(executiveFloor == 4) || !(\old(currentFloorID) == 0)) || !(\old(doorState) == 1)) || tmp___0 <= 0) || !(\old(currentHeading) == 1))) && (((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 0))) && ((((!(executiveFloor == 4) || !(\old(doorState) == 1)) || ((((((((executiveFloor == aux-getCurrentFloorID()-aux && currentFloorID == \old(currentFloorID)) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(currentFloorID) == executiveFloor)) - InvariantResult [Line: 1427]: Loop Invariant Derived loop invariant: ((!(executiveFloor == 4) || calls_4 == \old(calls_4)) || !(doorState == 1)) && ((!(doorState == 0) || !(executiveFloor == 4)) || calls_4 == \old(calls_4)) - InvariantResult [Line: 2147]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 500]: Loop Invariant Derived loop invariant: ((((((((calls_4 == \old(calls_4) || calls_4 == 0) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) || !(executiveFloor == 4)) || ((executiveFloor == 4 && (calls_4 == \old(calls_4) || calls_4 == 0)) && doorState == 0)) || ((executiveFloor == 4 && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 0)) && ((((((((calls_4 == \old(calls_4) || calls_4 == 0) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) || !(executiveFloor == 4)) || ((executiveFloor == 4 && (calls_4 == \old(calls_4) || calls_4 == 0)) && doorState == 0)) || !(\old(doorState) == 1)) || ((executiveFloor == 4 && doorState == 1) && calls_4 == 0)) - InvariantResult [Line: 2618]: Loop Invariant Derived loop invariant: (((((((((tmp == calls_4 && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && calls_4 == 0) || !(executiveFloor == 4)) || ((((((((tmp == calls_4 && currentFloorID == \old(currentFloorID)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || \result == 0)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && currentFloorID == 4) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 == currentFloorID)) || !(\old(doorState) == 1)) || ((((((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || \result == 0)) && \result == 0) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 == currentFloorID) && !(tmp___0 == executiveFloor))) && ((((!(executiveFloor == 4) || (currentHeading == 1 && doorState == 1)) || !(\old(currentFloorID) == 0)) || !(\old(doorState) == 1)) || !(\old(currentHeading) == 1))) && ((((!(executiveFloor == 4) || ((((((((tmp == calls_4 && currentFloorID == \old(currentFloorID)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || \result == 0)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && currentFloorID == 4) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 == currentFloorID)) || ((((tmp == calls_4 && currentFloorID == \old(currentFloorID)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && calls_4 == 0)) || !(\old(doorState) == 0)) || ((((((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || \result == 0)) && \result == 0) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && (doorState == 0 || doorState == 1)) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && tmp___0 == currentFloorID) && !(tmp___0 == executiveFloor)))) && (((currentFloorID == \old(currentFloorID) || !(executiveFloor == 4)) || \old(currentFloorID) == 4) || !(\old(doorState) == 1)) - InvariantResult [Line: 2366]: Loop Invariant Derived loop invariant: (!(currentFloorID == 0) || !(doorState == 0)) || !(executiveFloor == 4) - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((((((((((((((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && tmp___0 == 1) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)) || !(executiveFloor == 4)) || !(\old(doorState) == 1)) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(currentFloorID) == executiveFloor)) && ((!(executiveFloor == 4) || !(\old(doorState) == 1)) || !(0 == \old(calls_4)))) && ((((((((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && tmp___0 == 1) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)) || !(executiveFloor == 4)) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 0))) && ((((((((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && tmp___0 == 1) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)) || !(executiveFloor == 4)) || !(4 <= \old(currentFloorID))) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 0 < currentFloorID)) || !(\old(doorState) == 1))) && ((!(executiveFloor == 4) || !(\old(doorState) == 0)) || !(0 == \old(calls_4)))) && (((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 1))) && ((((!(executiveFloor == 4) || !(\old(currentFloorID) == 0)) || !(\old(doorState) == 1)) || tmp___0 <= 0) || !(\old(currentHeading) == 1))) && (((!(executiveFloor == 4) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || \old(currentFloorID) == 4) || !(\old(doorState) == 0))) && ((((((((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && tmp___0 == 1) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)) || !(executiveFloor == 4)) || ((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && !(tmp___0 == executiveFloor))) || (((((((((tmp == calls_4 && executiveFloor == 4) && tmp___9 == 0) && (!(currentFloorID == 4) || !(\old(currentFloorID) == 0))) && ((((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)))))) || aux-isFloorCalling(executiveFloor)-aux == 0)) && doorState == 0) && calls_4 == \old(calls_4)) && ((!(\old(floorID) == executiveFloor) || (((((executiveFloor == 4 || executiveFloor == 3) || executiveFloor == 1) || executiveFloor == 2) || executiveFloor == 0) && (((((!(executiveFloor == 3) && !(calls_4 == 0)) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2)) || (!(executiveFloor == 4) && ((!(executiveFloor == 3) && ((((!(calls_2 == 0) && !(executiveFloor == 0)) || (!(calls_0 == 0) && !(executiveFloor == 2))) && !(executiveFloor == 1)) || ((!(calls_1 == 0) && !(executiveFloor == 0)) && !(executiveFloor == 2)))) || (((!(calls_3 == 0) && !(executiveFloor == 1)) && !(executiveFloor == 0)) && !(executiveFloor == 2))))))) || \result == 0)) && 2 < currentFloorID) && 0 < currentFloorID)) || !(\old(doorState) == 0)) - InvariantResult [Line: 2275]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2424]: Loop Invariant Derived loop invariant: (!(currentFloorID == 0) || !(doorState == 0)) || !(executiveFloor == 4) - InvariantResult [Line: 2259]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 191]: Loop Invariant Derived loop invariant: (!(executiveFloor == 4) || !(\old(doorState) == 0)) && (!(executiveFloor == 4) || !(\old(doorState) == 1)) - InvariantResult [Line: 2663]: Loop Invariant Derived loop invariant: ((((((((!(executiveFloor == 4) || \old(currentFloorID) == 4) || ((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && !(currentFloorID == 4)) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 0)) && (((!(executiveFloor == 4) || \old(currentFloorID) == 4) || ((((((tmp == calls_4 && executiveFloor == 4) && currentFloorID == \old(currentFloorID)) && !(currentFloorID == 4)) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 1))) && (((!(executiveFloor == 4) || ((((tmp == calls_4 && executiveFloor == 4) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 1)) || !(0 == \old(calls_4)))) && ((((!(executiveFloor == 4) || !(4 <= \old(currentFloorID))) || (((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0))) || !(\old(doorState) == 0)) || ((4 <= floorID && calls_4 == \old(calls_4)) && calls_4 == 0))) && (((!(executiveFloor == 4) || ((((tmp == calls_4 && executiveFloor == 4) && calls_4 == \old(calls_4)) && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 1)) || (((((((currentFloorID == \old(currentFloorID) && (calls_4 == \old(calls_4) || calls_4 == 0)) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) && tmp___0 == currentFloorID) && floorID == 4) && (!(tmp == 0) || calls_4 == 0)))) && (((!(executiveFloor == 4) || ((tmp == calls_4 && currentFloorID == \old(currentFloorID)) && doorState == 1)) || !(\old(doorState) == 0)) || !(0 == \old(calls_4)))) && ((((!(executiveFloor == 4) || !(\old(currentFloorID) == 0)) || !(\old(doorState) == 1)) || !(\old(currentHeading) == 1)) || (currentHeading == 1 && floorID == 0)) - InvariantResult [Line: 2469]: Loop Invariant Derived loop invariant: (!(currentFloorID == 0) || !(doorState == 0)) || !(executiveFloor == 4) - InvariantResult [Line: 2453]: Loop Invariant Derived loop invariant: (!(currentFloorID == 0) || !(doorState == 0)) || !(executiveFloor == 4) - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: (executiveFloor == 4 && doorState == 1) || (executiveFloor == 4 && doorState == 0) - InvariantResult [Line: -1]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2598]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2054]: Loop Invariant Derived loop invariant: ((((((((calls_4 == \old(calls_4) || calls_4 == 0) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) || !(executiveFloor == 4)) || ((executiveFloor == 4 && (calls_4 == \old(calls_4) || calls_4 == 0)) && doorState == 0)) || ((executiveFloor == 4 && doorState == 1) && calls_4 == 0)) || !(\old(doorState) == 0)) && ((((((((calls_4 == \old(calls_4) || calls_4 == 0) && currentFloorID == executiveFloor) && currentFloorID == 4) && doorState == 1) || !(executiveFloor == 4)) || ((executiveFloor == 4 && (calls_4 == \old(calls_4) || calls_4 == 0)) && doorState == 0)) || !(\old(doorState) == 1)) || ((executiveFloor == 4 && doorState == 1) && calls_4 == 0)) - InvariantResult [Line: 2201]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2353]: Loop Invariant Derived loop invariant: (!(currentFloorID == 0) || !(doorState == 0)) || !(executiveFloor == 4) RESULT: Ultimate proved your program to be correct! [2022-12-14 13:17:22,439 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c9a02dfc-ad82-4574-a01c-c8948c0d501e/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE