./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 63ce65fdf446745f64534f105010543d07f1d807cf17249eadefb49fdfafb832 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:51:05,677 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:51:05,818 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Termination-32bit-Automizer_Default.epf [2023-11-06 22:51:05,823 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:51:05,825 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:51:05,870 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:51:05,872 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:51:05,873 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:51:05,874 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:51:05,880 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:51:05,881 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:51:05,882 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2023-11-06 22:51:05,882 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2023-11-06 22:51:05,884 INFO L153 SettingsManager]: * Use old map elimination=false [2023-11-06 22:51:05,885 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2023-11-06 22:51:05,886 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2023-11-06 22:51:05,886 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2023-11-06 22:51:05,887 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:51:05,888 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2023-11-06 22:51:05,889 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:51:05,889 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:51:05,890 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:51:05,890 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:51:05,891 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2023-11-06 22:51:05,891 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2023-11-06 22:51:05,892 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2023-11-06 22:51:05,892 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-11-06 22:51:05,893 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:51:05,893 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:51:05,894 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2023-11-06 22:51:05,895 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:51:05,896 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:51:05,896 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:51:05,896 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:51:05,897 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:51:05,897 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2023-11-06 22:51:05,898 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 63ce65fdf446745f64534f105010543d07f1d807cf17249eadefb49fdfafb832 [2023-11-06 22:51:06,239 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:51:06,280 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:51:06,283 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:51:06,285 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:51:06,286 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:51:06,287 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c [2023-11-06 22:51:09,629 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:51:10,007 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:51:10,007 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/sv-benchmarks/c/product-lines/elevator_spec13_product29.cil.c [2023-11-06 22:51:10,035 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/data/774d81e6e/9c6dd85de864435798bb31560a7aad11/FLAGeae437b75 [2023-11-06 22:51:10,054 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/data/774d81e6e/9c6dd85de864435798bb31560a7aad11 [2023-11-06 22:51:10,060 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:51:10,062 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:51:10,066 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:51:10,067 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:51:10,073 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:51:10,074 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,075 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4f68984e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:10, skipping insertion in model container [2023-11-06 22:51:10,075 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:51:10" (1/1) ... [2023-11-06 22:51:10,184 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:51:11,025 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:51:11,048 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:51:11,060 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [48] [2023-11-06 22:51:11,062 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [716] [2023-11-06 22:51:11,062 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [736] [2023-11-06 22:51:11,063 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [857] [2023-11-06 22:51:11,063 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification13_spec.i","") [2398] [2023-11-06 22:51:11,063 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [2488] [2023-11-06 22:51:11,064 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2497] [2023-11-06 22:51:11,065 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2589] [2023-11-06 22:51:11,065 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2940] [2023-11-06 22:51:11,066 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2975] [2023-11-06 22:51:11,272 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:51:11,304 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:51:11,304 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11 WrapperNode [2023-11-06 22:51:11,305 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:51:11,306 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:51:11,306 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:51:11,306 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:51:11,315 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:11,376 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:11,907 INFO L138 Inliner]: procedures = 91, calls = 341, calls flagged for inlining = 194, calls inlined = 985, statements flattened = 34890 [2023-11-06 22:51:11,907 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:51:11,908 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:51:11,909 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:51:11,909 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:51:11,920 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:11,921 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:11,986 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:11,986 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:12,314 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:12,574 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:12,605 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:12,663 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:12,761 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:51:12,762 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:51:12,763 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:51:12,764 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:51:12,765 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (1/1) ... [2023-11-06 22:51:12,777 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:12,858 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:12,880 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:12,904 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2023-11-06 22:51:12,933 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:51:12,933 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:51:12,934 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:51:12,934 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:51:13,127 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:51:13,130 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:51:29,433 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:51:29,508 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:51:29,508 INFO L302 CfgBuilder]: Removed 61 assume(true) statements. [2023-11-06 22:51:29,519 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:51:29 BoogieIcfgContainer [2023-11-06 22:51:29,519 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:51:29,520 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2023-11-06 22:51:29,521 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2023-11-06 22:51:29,524 INFO L274 PluginConnector]: BuchiAutomizer initialized [2023-11-06 22:51:29,525 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-06 22:51:29,526 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 06.11 10:51:10" (1/3) ... [2023-11-06 22:51:29,527 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6c40e412 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 06.11 10:51:29, skipping insertion in model container [2023-11-06 22:51:29,527 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-06 22:51:29,527 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:11" (2/3) ... [2023-11-06 22:51:29,528 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6c40e412 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 06.11 10:51:29, skipping insertion in model container [2023-11-06 22:51:29,528 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-06 22:51:29,528 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:51:29" (3/3) ... [2023-11-06 22:51:29,530 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product29.cil.c [2023-11-06 22:51:29,769 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2023-11-06 22:51:29,770 INFO L304 stractBuchiCegarLoop]: Hoare is false [2023-11-06 22:51:29,770 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2023-11-06 22:51:29,770 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2023-11-06 22:51:29,770 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2023-11-06 22:51:29,770 INFO L308 stractBuchiCegarLoop]: Difference is false [2023-11-06 22:51:29,771 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2023-11-06 22:51:29,771 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2023-11-06 22:51:29,811 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9462 states, 9461 states have (on average 1.8787654581968078) internal successors, (17775), 9461 states have internal predecessors, (17775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:30,074 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2378 [2023-11-06 22:51:30,074 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:30,075 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:30,088 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:30,089 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:30,089 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2023-11-06 22:51:30,120 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 9462 states, 9461 states have (on average 1.8787654581968078) internal successors, (17775), 9461 states have internal predecessors, (17775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:30,294 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2378 [2023-11-06 22:51:30,294 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:30,295 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:30,298 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:30,299 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:30,309 INFO L748 eck$LassoCheckResult]: Stem: 4971#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 4675#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 8014#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7699#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 672#valid_product_returnLabel#1true main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 7744#L2927true assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1539#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1810#L783true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 2536#getOrigin_returnLabel#1true aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 9282#L409true assume 0 == initPersonOnFloor_~floor#1; 8099#L410true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1039#L517-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2566#L201true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7883#L213-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 980#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 7638#aliceCall_returnLabel#1true havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 8983#L783-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 405#getOrigin_returnLabel#2true angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5706#L409-1true assume 0 == initPersonOnFloor_~floor#1; 6242#L410-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 3585#L517-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 8387#L201-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6457#L213-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 3393#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 7848#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 7248#getCurrentHeading_returnLabel#1true __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 3707#__utac_acc__Specification13_spec__1_returnLabel#1true havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 662#L1792true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 3464#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 639#L1128true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 5791#buttonForFloorIsPressed_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 265#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 8935#L1942true assume !(0 != timeShift_~tmp___9~2#1); 5999#L2033true assume 1 == ~doorState~0;~doorState~0 := 0; 165#L2033-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 7557#L1695true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 5561#isAnyLiftButtonPressed_returnLabel#1true stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 4570#L1668true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 4947#L1315-2true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 5119#L1484-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 3049#stopRequestedInDirection__wrappee__empty_returnLabel#3true stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 1647#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 9148#L2041true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 6765#L1730true assume !(1 == ~currentHeading~0); 5330#L1740true assume !(0 == ~currentFloorID~0); 5062#L1740-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5702#L1746-1true havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 4142#L2050-2true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 1025#L2425true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 2027#L2426true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 6646#L2245true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 884#L2249-2true [2023-11-06 22:51:30,310 INFO L750 eck$LassoCheckResult]: Loop: 884#L2249-2true assume !false; 84#L2250true assume existInLiftCallsInDirection_~i~0#1 < 5; 6866#L2251true assume !(0 == existInLiftCallsInDirection_~i~0#1); 1929#$Ultimate##3696true assume !(1 == existInLiftCallsInDirection_~i~0#1); 7212#$Ultimate##3700true assume !(2 == existInLiftCallsInDirection_~i~0#1); 4679#$Ultimate##3704true assume !(3 == existInLiftCallsInDirection_~i~0#1); 3548#$Ultimate##3708true assume !(4 == existInLiftCallsInDirection_~i~0#1); 101#L2292-1true existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 884#L2249-2true [2023-11-06 22:51:30,317 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:30,317 INFO L85 PathProgramCache]: Analyzing trace with hash 1983246906, now seen corresponding path program 1 times [2023-11-06 22:51:30,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:30,329 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [346198757] [2023-11-06 22:51:30,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:30,331 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:30,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:31,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:31,015 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:31,015 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [346198757] [2023-11-06 22:51:31,016 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [346198757] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:31,017 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:31,017 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:51:31,019 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2010795888] [2023-11-06 22:51:31,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:31,026 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:31,027 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:31,027 INFO L85 PathProgramCache]: Analyzing trace with hash 110182909, now seen corresponding path program 1 times [2023-11-06 22:51:31,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:31,028 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1010960697] [2023-11-06 22:51:31,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:31,029 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:31,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:31,038 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:31,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:31,067 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:31,143 INFO L210 LassoAnalysis]: Preferences: [2023-11-06 22:51:31,144 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2023-11-06 22:51:31,144 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2023-11-06 22:51:31,145 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2023-11-06 22:51:31,145 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2023-11-06 22:51:31,145 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:31,145 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2023-11-06 22:51:31,146 INFO L132 ssoRankerPreferences]: Path of dumped script: [2023-11-06 22:51:31,146 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration1_Loop [2023-11-06 22:51:31,146 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2023-11-06 22:51:31,146 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2023-11-06 22:51:31,171 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-06 22:51:31,293 INFO L294 LassoAnalysis]: Preprocessing complete. [2023-11-06 22:51:31,294 INFO L404 LassoAnalysis]: Checking for nontermination... [2023-11-06 22:51:31,297 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:31,298 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:31,302 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:31,308 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2023-11-06 22:51:31,310 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-06 22:51:31,311 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-06 22:51:31,362 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:31,363 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:31,363 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:31,365 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:31,383 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2023-11-06 22:51:31,383 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-06 22:51:31,398 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2023-11-06 22:51:31,426 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2023-11-06 22:51:31,436 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:31,437 INFO L210 LassoAnalysis]: Preferences: [2023-11-06 22:51:31,437 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2023-11-06 22:51:31,437 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2023-11-06 22:51:31,437 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2023-11-06 22:51:31,438 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2023-11-06 22:51:31,438 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:31,438 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2023-11-06 22:51:31,438 INFO L132 ssoRankerPreferences]: Path of dumped script: [2023-11-06 22:51:31,438 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration1_Loop [2023-11-06 22:51:31,439 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2023-11-06 22:51:31,439 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2023-11-06 22:51:31,440 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-06 22:51:31,522 INFO L294 LassoAnalysis]: Preprocessing complete. [2023-11-06 22:51:31,529 INFO L490 LassoAnalysis]: Using template 'affine'. [2023-11-06 22:51:31,531 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:31,531 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:31,533 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:31,539 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-06 22:51:31,539 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2023-11-06 22:51:31,554 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-06 22:51:31,554 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-06 22:51:31,555 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-06 22:51:31,555 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-06 22:51:31,555 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-06 22:51:31,559 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-06 22:51:31,560 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-06 22:51:31,571 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2023-11-06 22:51:31,577 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2023-11-06 22:51:31,577 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2023-11-06 22:51:31,579 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:31,579 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:31,611 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:31,614 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2023-11-06 22:51:31,614 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2023-11-06 22:51:31,614 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2023-11-06 22:51:31,615 INFO L513 LassoAnalysis]: Proved termination. [2023-11-06 22:51:31,617 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2023-11-06 22:51:31,626 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:31,630 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2023-11-06 22:51:31,667 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:31,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:31,879 INFO L262 TraceCheckSpWp]: Trace formula consists of 626 conjuncts, 2 conjunts are in the unsatisfiable core [2023-11-06 22:51:31,884 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:51:32,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:32,055 WARN L260 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:51:32,056 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:51:32,485 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:32,541 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2023-11-06 22:51:32,595 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 9462 states, 9461 states have (on average 1.8787654581968078) internal successors, (17775), 9461 states have internal predecessors, (17775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 6.555555555555555) internal successors, (59), 9 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:33,070 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:34,368 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 9462 states, 9461 states have (on average 1.8787654581968078) internal successors, (17775), 9461 states have internal predecessors, (17775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 6.555555555555555) internal successors, (59), 9 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 24726 states and 46390 transitions. Complement of second has 18 states. [2023-11-06 22:51:34,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2023-11-06 22:51:34,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.555555555555555) internal successors, (59), 9 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:34,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 32103 transitions. [2023-11-06 22:51:34,447 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 32103 transitions. Stem has 51 letters. Loop has 8 letters. [2023-11-06 22:51:34,450 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2023-11-06 22:51:34,456 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 32103 transitions. Stem has 59 letters. Loop has 8 letters. [2023-11-06 22:51:34,458 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2023-11-06 22:51:34,459 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 32103 transitions. Stem has 51 letters. Loop has 16 letters. [2023-11-06 22:51:34,461 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2023-11-06 22:51:34,463 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24726 states and 46390 transitions. [2023-11-06 22:51:34,852 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 4674 [2023-11-06 22:51:35,105 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24726 states to 17017 states and 31845 transitions. [2023-11-06 22:51:35,106 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16987 [2023-11-06 22:51:35,143 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16988 [2023-11-06 22:51:35,144 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17017 states and 31845 transitions. [2023-11-06 22:51:35,154 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:35,154 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17017 states and 31845 transitions. [2023-11-06 22:51:35,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17017 states and 31845 transitions. [2023-11-06 22:51:35,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17017 to 16991. [2023-11-06 22:51:35,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16991 states, 16991 states have (on average 1.8719321993996823) internal successors, (31806), 16990 states have internal predecessors, (31806), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:35,814 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16991 states to 16991 states and 31806 transitions. [2023-11-06 22:51:35,815 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16991 states and 31806 transitions. [2023-11-06 22:51:35,816 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:35,819 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:35,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:35,823 INFO L87 Difference]: Start difference. First operand 16991 states and 31806 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 5 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:36,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:36,539 INFO L93 Difference]: Finished difference Result 16975 states and 31677 transitions. [2023-11-06 22:51:36,539 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16975 states and 31677 transitions. [2023-11-06 22:51:36,903 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 4658 [2023-11-06 22:51:37,035 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16975 states to 16966 states and 31668 transitions. [2023-11-06 22:51:37,035 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16947 [2023-11-06 22:51:37,051 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16947 [2023-11-06 22:51:37,052 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16966 states and 31668 transitions. [2023-11-06 22:51:37,061 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:37,061 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16966 states and 31668 transitions. [2023-11-06 22:51:37,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16966 states and 31668 transitions. [2023-11-06 22:51:37,330 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16966 to 9449. [2023-11-06 22:51:37,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9449 states, 9449 states have (on average 1.8667583871309132) internal successors, (17639), 9448 states have internal predecessors, (17639), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:37,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9449 states to 9449 states and 17639 transitions. [2023-11-06 22:51:37,379 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9449 states and 17639 transitions. [2023-11-06 22:51:37,380 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:51:37,381 INFO L428 stractBuchiCegarLoop]: Abstraction has 9449 states and 17639 transitions. [2023-11-06 22:51:37,381 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2023-11-06 22:51:37,381 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9449 states and 17639 transitions. [2023-11-06 22:51:37,439 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2376 [2023-11-06 22:51:37,439 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:37,439 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:37,444 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:37,444 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:37,445 INFO L748 eck$LassoCheckResult]: Stem: 75973#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 75709#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 75710#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 77549#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 70030#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 70031#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 71731#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 71732#L783 assume !(0 == getOrigin_~person#1); 72186#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 69225#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 73325#L409 assume 0 == initPersonOnFloor_~floor#1; 77653#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 68709#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 70782#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 70631#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 70677#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 70678#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 77525#L783-1 assume !(0 == getOrigin_~person#1); 68527#L787-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 68528#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 69422#L409-1 assume 0 == initPersonOnFloor_~floor#1; 76530#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 69111#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 74638#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 75127#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 74432#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 74433#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 77361#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 74776#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 70008#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 70009#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 69959#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 69960#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 69081#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 69082#L1942 assume !(0 != timeShift_~tmp___9~2#1); 76707#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 68822#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 68823#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 71252#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 75610#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 75612#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 75950#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 68454#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 69679#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 71910#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 77119#L1730 assume !(1 == ~currentHeading~0); 76262#L1740 assume !(0 == ~currentFloorID~0); 76057#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 76058#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 70391#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 70758#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 70759#L2426 assume !(1 == ~prevDir~0); 72525#L2452 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 72650#L2245-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 74576#L2249-8 [2023-11-06 22:51:37,446 INFO L750 eck$LassoCheckResult]: Loop: 74576#L2249-8 assume !false; 72435#L2250-2 assume existInLiftCallsInDirection_~i~0#1 < 5; 72436#L2251-2 assume !(0 == existInLiftCallsInDirection_~i~0#1); 75888#$Ultimate##3852 assume !(1 == existInLiftCallsInDirection_~i~0#1); 76104#$Ultimate##3856 assume !(2 == existInLiftCallsInDirection_~i~0#1); 74402#$Ultimate##3860 assume !(3 == existInLiftCallsInDirection_~i~0#1); 68779#$Ultimate##3864 assume !(4 == existInLiftCallsInDirection_~i~0#1); 68780#L2292-5 existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 74576#L2249-8 [2023-11-06 22:51:37,448 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:37,449 INFO L85 PathProgramCache]: Analyzing trace with hash 1784094344, now seen corresponding path program 1 times [2023-11-06 22:51:37,449 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:37,449 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1708419959] [2023-11-06 22:51:37,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:37,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:37,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:37,876 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:37,877 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:37,877 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1708419959] [2023-11-06 22:51:37,878 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1708419959] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:37,878 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:37,878 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:51:37,878 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [958050058] [2023-11-06 22:51:37,878 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:37,879 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:37,879 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:37,880 INFO L85 PathProgramCache]: Analyzing trace with hash -1082717699, now seen corresponding path program 1 times [2023-11-06 22:51:37,880 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:37,880 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1136834207] [2023-11-06 22:51:37,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:37,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:37,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:37,886 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:37,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:37,894 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:37,953 INFO L210 LassoAnalysis]: Preferences: [2023-11-06 22:51:37,953 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2023-11-06 22:51:37,953 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2023-11-06 22:51:37,953 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2023-11-06 22:51:37,953 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2023-11-06 22:51:37,954 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:37,954 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2023-11-06 22:51:37,954 INFO L132 ssoRankerPreferences]: Path of dumped script: [2023-11-06 22:51:37,954 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration2_Loop [2023-11-06 22:51:37,954 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2023-11-06 22:51:37,954 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2023-11-06 22:51:37,955 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-06 22:51:38,027 INFO L294 LassoAnalysis]: Preprocessing complete. [2023-11-06 22:51:38,027 INFO L404 LassoAnalysis]: Checking for nontermination... [2023-11-06 22:51:38,027 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:38,027 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:38,031 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:38,039 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2023-11-06 22:51:38,039 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-06 22:51:38,054 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2023-11-06 22:51:38,072 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:38,073 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:38,073 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:38,075 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:38,085 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2023-11-06 22:51:38,085 INFO L160 nArgumentSynthesizer]: Using integer mode. [2023-11-06 22:51:38,092 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2023-11-06 22:51:38,132 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2023-11-06 22:51:38,143 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:38,143 INFO L210 LassoAnalysis]: Preferences: [2023-11-06 22:51:38,143 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2023-11-06 22:51:38,143 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2023-11-06 22:51:38,144 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2023-11-06 22:51:38,144 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2023-11-06 22:51:38,144 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:38,144 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2023-11-06 22:51:38,144 INFO L132 ssoRankerPreferences]: Path of dumped script: [2023-11-06 22:51:38,144 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product29.cil.c_Iteration2_Loop [2023-11-06 22:51:38,144 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2023-11-06 22:51:38,144 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2023-11-06 22:51:38,145 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2023-11-06 22:51:38,219 INFO L294 LassoAnalysis]: Preprocessing complete. [2023-11-06 22:51:38,219 INFO L490 LassoAnalysis]: Using template 'affine'. [2023-11-06 22:51:38,220 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:38,220 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:38,221 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:38,230 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2023-11-06 22:51:38,244 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2023-11-06 22:51:38,245 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2023-11-06 22:51:38,245 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2023-11-06 22:51:38,245 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2023-11-06 22:51:38,245 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2023-11-06 22:51:38,246 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2023-11-06 22:51:38,247 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2023-11-06 22:51:38,247 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2023-11-06 22:51:38,258 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2023-11-06 22:51:38,261 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2023-11-06 22:51:38,262 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2023-11-06 22:51:38,262 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-06 22:51:38,262 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:38,264 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:38,274 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2023-11-06 22:51:38,274 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2023-11-06 22:51:38,274 INFO L513 LassoAnalysis]: Proved termination. [2023-11-06 22:51:38,274 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2023-11-06 22:51:38,284 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2023-11-06 22:51:38,285 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:38,285 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2023-11-06 22:51:38,303 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:38,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:38,450 INFO L262 TraceCheckSpWp]: Trace formula consists of 629 conjuncts, 2 conjunts are in the unsatisfiable core [2023-11-06 22:51:38,454 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:51:38,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:38,576 WARN L260 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:51:38,577 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:51:38,811 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:38,812 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2023-11-06 22:51:38,813 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 9449 states and 17639 transitions. cyclomatic complexity: 8224 Second operand has 9 states, 9 states have (on average 6.888888888888889) internal successors, (62), 9 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:39,595 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1b64b14a-5ca1-4878-ae79-bbeaa5e1b3c8/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2023-11-06 22:51:39,960 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 9449 states and 17639 transitions. cyclomatic complexity: 8224. Second operand has 9 states, 9 states have (on average 6.888888888888889) internal successors, (62), 9 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 17022 states and 31751 transitions. Complement of second has 17 states. [2023-11-06 22:51:39,961 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2023-11-06 22:51:39,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.888888888888889) internal successors, (62), 9 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:39,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 17628 transitions. [2023-11-06 22:51:39,992 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 17628 transitions. Stem has 54 letters. Loop has 8 letters. [2023-11-06 22:51:39,995 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2023-11-06 22:51:39,995 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 17628 transitions. Stem has 62 letters. Loop has 8 letters. [2023-11-06 22:51:39,998 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2023-11-06 22:51:39,998 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 17628 transitions. Stem has 54 letters. Loop has 16 letters. [2023-11-06 22:51:39,999 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2023-11-06 22:51:39,999 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17022 states and 31751 transitions. [2023-11-06 22:51:40,150 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 4672 [2023-11-06 22:51:40,268 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17022 states to 17014 states and 31743 transitions. [2023-11-06 22:51:40,268 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16965 [2023-11-06 22:51:40,287 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16966 [2023-11-06 22:51:40,288 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17014 states and 31743 transitions. [2023-11-06 22:51:40,290 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:40,290 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17014 states and 31743 transitions. [2023-11-06 22:51:40,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17014 states and 31743 transitions. [2023-11-06 22:51:40,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17014 to 9473. [2023-11-06 22:51:40,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9473 states, 9473 states have (on average 1.866040325134593) internal successors, (17677), 9472 states have internal predecessors, (17677), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:40,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9473 states to 9473 states and 17677 transitions. [2023-11-06 22:51:40,782 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9473 states and 17677 transitions. [2023-11-06 22:51:40,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:40,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:51:40,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:51:40,784 INFO L87 Difference]: Start difference. First operand 9473 states and 17677 transitions. Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:41,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:41,924 INFO L93 Difference]: Finished difference Result 18870 states and 35190 transitions. [2023-11-06 22:51:41,924 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18870 states and 35190 transitions. [2023-11-06 22:51:42,042 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 4760 [2023-11-06 22:51:42,144 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18870 states to 18870 states and 35190 transitions. [2023-11-06 22:51:42,144 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18794 [2023-11-06 22:51:42,162 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18794 [2023-11-06 22:51:42,163 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18870 states and 35190 transitions. [2023-11-06 22:51:42,166 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:42,166 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18870 states and 35190 transitions. [2023-11-06 22:51:42,187 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18870 states and 35190 transitions. [2023-11-06 22:51:42,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18870 to 9488. [2023-11-06 22:51:42,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9488 states, 9488 states have (on average 1.8646711635750421) internal successors, (17692), 9487 states have internal predecessors, (17692), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:42,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9488 states to 9488 states and 17692 transitions. [2023-11-06 22:51:42,526 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9488 states and 17692 transitions. [2023-11-06 22:51:42,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:51:42,527 INFO L428 stractBuchiCegarLoop]: Abstraction has 9488 states and 17692 transitions. [2023-11-06 22:51:42,528 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2023-11-06 22:51:42,528 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9488 states and 17692 transitions. [2023-11-06 22:51:42,587 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:42,587 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:42,588 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:42,589 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:42,590 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:42,590 INFO L748 eck$LassoCheckResult]: Stem: 131026#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 130759#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 130760#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 132614#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 125075#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 125076#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 126776#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 126777#L783 assume !(0 == getOrigin_~person#1); 127229#L787 assume !(1 == getOrigin_~person#1); 124271#L791 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 124272#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 132904#L409 assume 0 == initPersonOnFloor_~floor#1; 132718#L410 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 123754#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 125826#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 125676#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 125722#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 125723#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 132590#L783-1 assume !(0 == getOrigin_~person#1); 123570#L787-1 assume !(1 == getOrigin_~person#1); 123572#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 129667#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 132905#L409-1 assume 0 == initPersonOnFloor_~floor#1; 131914#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 124158#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 129688#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 130177#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 129479#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 129480#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 132425#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 129826#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 125053#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 125054#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 125004#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 125005#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 124128#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 124129#L1942 assume !(0 != timeShift_~tmp___9~2#1); 131768#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 123869#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 123870#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 126297#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 130660#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 130662#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 131003#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 123499#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 124724#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 126955#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 132184#L1730 assume !(1 == ~currentHeading~0); 131318#L1740 assume !(0 == ~currentFloorID~0); 131110#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 131111#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 125436#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 125803#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 125804#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 127573#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 130254#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 124363#L2315-2 [2023-11-06 22:51:42,592 INFO L750 eck$LassoCheckResult]: Loop: 124363#L2315-2 assume !false; 124364#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 130575#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 130576#L2324-2 assume !false; 132619#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 130989#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 124363#L2315-2 [2023-11-06 22:51:42,592 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:42,593 INFO L85 PathProgramCache]: Analyzing trace with hash -1148840185, now seen corresponding path program 1 times [2023-11-06 22:51:42,593 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:42,593 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [840252968] [2023-11-06 22:51:42,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:42,594 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:42,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:42,730 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:42,730 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:42,731 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [840252968] [2023-11-06 22:51:42,731 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [840252968] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:42,731 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:42,732 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:51:42,732 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [566771235] [2023-11-06 22:51:42,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:42,733 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:42,733 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:42,734 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 1 times [2023-11-06 22:51:42,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:42,734 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2106696842] [2023-11-06 22:51:42,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:42,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:42,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:42,742 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:42,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:42,752 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:42,797 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:42,798 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:51:42,798 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:42,799 INFO L87 Difference]: Start difference. First operand 9488 states and 17692 transitions. cyclomatic complexity: 8239 Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:43,140 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:43,140 INFO L93 Difference]: Finished difference Result 9454 states and 17624 transitions. [2023-11-06 22:51:43,141 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9454 states and 17624 transitions. [2023-11-06 22:51:43,357 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:43,443 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9454 states to 9454 states and 17624 transitions. [2023-11-06 22:51:43,444 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9416 [2023-11-06 22:51:43,452 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9416 [2023-11-06 22:51:43,453 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9454 states and 17624 transitions. [2023-11-06 22:51:43,454 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:43,455 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9454 states and 17624 transitions. [2023-11-06 22:51:43,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9454 states and 17624 transitions. [2023-11-06 22:51:43,591 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9454 to 9454. [2023-11-06 22:51:43,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9454 states, 9454 states have (on average 1.8641844721810874) internal successors, (17624), 9453 states have internal predecessors, (17624), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:43,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9454 states to 9454 states and 17624 transitions. [2023-11-06 22:51:43,636 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9454 states and 17624 transitions. [2023-11-06 22:51:43,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:51:43,639 INFO L428 stractBuchiCegarLoop]: Abstraction has 9454 states and 17624 transitions. [2023-11-06 22:51:43,640 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2023-11-06 22:51:43,640 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9454 states and 17624 transitions. [2023-11-06 22:51:43,704 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:43,704 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:43,704 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:43,710 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:43,710 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:43,711 INFO L748 eck$LassoCheckResult]: Stem: 149950#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 149684#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 149685#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 151534#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 144018#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 144019#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 145714#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 145715#L783 assume !(0 == getOrigin_~person#1); 146167#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 147302#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 147303#L409 assume !(0 == initPersonOnFloor_~floor#1); 143611#L436 assume !(1 == initPersonOnFloor_~floor#1); 143612#L463 assume !(2 == initPersonOnFloor_~floor#1); 144762#L490 assume 3 == initPersonOnFloor_~floor#1; 144763#L491 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 143458#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 144767#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 144619#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 144665#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 144666#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 151510#L783-1 assume !(0 == getOrigin_~person#1); 142518#L787-1 assume !(1 == getOrigin_~person#1); 142520#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 148595#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151817#L409-1 assume 0 == initPersonOnFloor_~floor#1; 150835#L410-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 143103#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 148616#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 149104#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 148407#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 148408#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 151345#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 148754#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 143996#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 143997#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 143947#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 143948#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 143073#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 143074#L1942 assume !(0 != timeShift_~tmp___9~2#1); 150689#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 142814#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 142815#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 145236#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 149585#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 149587#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 149927#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 142447#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 143667#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 145893#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 151104#L1730 assume !(1 == ~currentHeading~0); 150242#L1740 assume !(0 == ~currentFloorID~0); 150034#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 150035#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 144379#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 144744#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 144745#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 146511#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 149181#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 143305#L2315-2 [2023-11-06 22:51:43,712 INFO L750 eck$LassoCheckResult]: Loop: 143305#L2315-2 assume !false; 143306#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 149500#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 149501#L2324-2 assume !false; 151539#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 149913#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 143305#L2315-2 [2023-11-06 22:51:43,712 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:43,712 INFO L85 PathProgramCache]: Analyzing trace with hash -1782986316, now seen corresponding path program 1 times [2023-11-06 22:51:43,714 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:43,718 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1377887145] [2023-11-06 22:51:43,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:43,719 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:43,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:43,983 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:43,983 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:43,983 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1377887145] [2023-11-06 22:51:43,984 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1377887145] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:43,984 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:43,984 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:51:43,984 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [522299990] [2023-11-06 22:51:43,985 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:43,985 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:43,985 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:43,986 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 2 times [2023-11-06 22:51:43,986 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:43,986 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1443087798] [2023-11-06 22:51:43,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:43,987 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:43,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:43,992 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:43,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:44,001 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:44,027 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:44,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:44,028 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:44,028 INFO L87 Difference]: Start difference. First operand 9454 states and 17624 transitions. cyclomatic complexity: 8205 Second operand has 5 states, 5 states have (on average 11.6) internal successors, (58), 5 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:44,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:44,744 INFO L93 Difference]: Finished difference Result 9462 states and 17631 transitions. [2023-11-06 22:51:44,744 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9462 states and 17631 transitions. [2023-11-06 22:51:44,803 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:44,845 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9462 states to 9462 states and 17631 transitions. [2023-11-06 22:51:44,845 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9424 [2023-11-06 22:51:44,854 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9424 [2023-11-06 22:51:44,855 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9462 states and 17631 transitions. [2023-11-06 22:51:44,856 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:44,857 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9462 states and 17631 transitions. [2023-11-06 22:51:44,873 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9462 states and 17631 transitions. [2023-11-06 22:51:45,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9462 to 9454. [2023-11-06 22:51:45,154 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9454 states, 9454 states have (on average 1.8635498201819336) internal successors, (17618), 9453 states have internal predecessors, (17618), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:45,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9454 states to 9454 states and 17618 transitions. [2023-11-06 22:51:45,184 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9454 states and 17618 transitions. [2023-11-06 22:51:45,185 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:51:45,187 INFO L428 stractBuchiCegarLoop]: Abstraction has 9454 states and 17618 transitions. [2023-11-06 22:51:45,188 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2023-11-06 22:51:45,188 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9454 states and 17618 transitions. [2023-11-06 22:51:45,232 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:45,232 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:45,232 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:45,234 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:45,234 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:45,235 INFO L748 eck$LassoCheckResult]: Stem: 168879#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 168613#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 168614#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 170463#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 162947#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 162948#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 164643#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 164644#L783 assume !(0 == getOrigin_~person#1); 165096#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 166231#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 166232#L409 assume !(0 == initPersonOnFloor_~floor#1); 162540#L436 assume !(1 == initPersonOnFloor_~floor#1); 162541#L463 assume !(2 == initPersonOnFloor_~floor#1); 163691#L490 assume 3 == initPersonOnFloor_~floor#1; 163692#L491 assume !(0 == initPersonOnFloor_~person#1); 165448#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 162387#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 163696#L201 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 163548#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 163594#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 163595#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 170439#L783-1 assume !(0 == getOrigin_~person#1); 161447#L787-1 assume !(1 == getOrigin_~person#1); 161449#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 167524#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 170746#L409-1 assume 0 == initPersonOnFloor_~floor#1; 169764#L410-2 assume !(0 == initPersonOnFloor_~person#1); 165852#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 162032#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 167545#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 168033#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 167336#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 167337#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 170274#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 167683#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 162925#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 162926#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 162876#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 162877#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 162002#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 162003#L1942 assume !(0 != timeShift_~tmp___9~2#1); 169618#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 161743#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 161744#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 164165#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 168514#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 168516#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 168856#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 161376#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 162596#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 164822#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 170033#L1730 assume !(1 == ~currentHeading~0); 169171#L1740 assume !(0 == ~currentFloorID~0); 168963#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 168964#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 163308#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 163673#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 163674#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 165440#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 168110#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 162234#L2315-2 [2023-11-06 22:51:45,237 INFO L750 eck$LassoCheckResult]: Loop: 162234#L2315-2 assume !false; 162235#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 168429#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 168430#L2324-2 assume !false; 170468#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 168842#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 162234#L2315-2 [2023-11-06 22:51:45,238 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:45,238 INFO L85 PathProgramCache]: Analyzing trace with hash -1217851280, now seen corresponding path program 1 times [2023-11-06 22:51:45,238 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:45,238 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1783020821] [2023-11-06 22:51:45,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:45,239 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:45,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:45,378 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:45,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:45,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1783020821] [2023-11-06 22:51:45,379 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1783020821] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:45,380 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:45,380 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:51:45,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1890694405] [2023-11-06 22:51:45,380 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:45,382 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:45,382 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:45,387 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 3 times [2023-11-06 22:51:45,387 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:45,388 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [102342918] [2023-11-06 22:51:45,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:45,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:45,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:45,393 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:45,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:45,411 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:45,439 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:45,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:51:45,440 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:51:45,440 INFO L87 Difference]: Start difference. First operand 9454 states and 17618 transitions. cyclomatic complexity: 8199 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:46,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:46,025 INFO L93 Difference]: Finished difference Result 9472 states and 17643 transitions. [2023-11-06 22:51:46,026 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9472 states and 17643 transitions. [2023-11-06 22:51:46,094 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:46,143 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9472 states to 9472 states and 17643 transitions. [2023-11-06 22:51:46,143 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9434 [2023-11-06 22:51:46,153 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9434 [2023-11-06 22:51:46,153 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9472 states and 17643 transitions. [2023-11-06 22:51:46,155 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:46,156 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9472 states and 17643 transitions. [2023-11-06 22:51:46,175 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9472 states and 17643 transitions. [2023-11-06 22:51:46,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9472 to 9458. [2023-11-06 22:51:46,337 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9458 states, 9458 states have (on average 1.8630788750264327) internal successors, (17621), 9457 states have internal predecessors, (17621), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:46,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9458 states to 9458 states and 17621 transitions. [2023-11-06 22:51:46,378 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9458 states and 17621 transitions. [2023-11-06 22:51:46,379 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:51:46,380 INFO L428 stractBuchiCegarLoop]: Abstraction has 9458 states and 17621 transitions. [2023-11-06 22:51:46,380 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2023-11-06 22:51:46,380 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9458 states and 17621 transitions. [2023-11-06 22:51:46,438 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:46,438 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:46,438 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:46,440 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:46,440 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:46,441 INFO L748 eck$LassoCheckResult]: Stem: 187816#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 187550#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 187551#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 189401#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 181882#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 181883#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 183578#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 183579#L783 assume !(0 == getOrigin_~person#1); 184031#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 185168#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 185169#L409 assume !(0 == initPersonOnFloor_~floor#1); 181475#L436 assume !(1 == initPersonOnFloor_~floor#1); 181476#L463 assume !(2 == initPersonOnFloor_~floor#1); 182626#L490 assume 3 == initPersonOnFloor_~floor#1; 182627#L491 assume !(0 == initPersonOnFloor_~person#1); 184385#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 181322#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 182631#L201 assume !(0 == callOnFloor_~floorID#1); 185208#L204 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 182483#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 182529#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 182530#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 189377#L783-1 assume !(0 == getOrigin_~person#1); 180382#L787-1 assume !(1 == getOrigin_~person#1); 180384#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 186461#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 189685#L409-1 assume 0 == initPersonOnFloor_~floor#1; 188701#L410-2 assume !(0 == initPersonOnFloor_~person#1); 184789#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 184367#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 186482#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 186970#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 186273#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 186274#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 189212#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 186620#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 181860#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 181861#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 181811#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 181812#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 180937#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 180938#L1942 assume !(0 != timeShift_~tmp___9~2#1); 188555#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 180678#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 180679#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 183100#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 187451#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 187453#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 187793#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 180311#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 181531#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 183757#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 188971#L1730 assume !(1 == ~currentHeading~0); 188108#L1740 assume !(0 == ~currentFloorID~0); 187900#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 187901#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 182243#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 182608#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 182609#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 184377#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 187047#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 181169#L2315-2 [2023-11-06 22:51:46,441 INFO L750 eck$LassoCheckResult]: Loop: 181169#L2315-2 assume !false; 181170#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 187366#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 187367#L2324-2 assume !false; 189406#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 187779#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 181169#L2315-2 [2023-11-06 22:51:46,442 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:46,442 INFO L85 PathProgramCache]: Analyzing trace with hash -690056843, now seen corresponding path program 1 times [2023-11-06 22:51:46,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:46,443 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [268570778] [2023-11-06 22:51:46,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:46,444 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:46,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:46,563 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:46,564 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:46,564 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [268570778] [2023-11-06 22:51:46,564 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [268570778] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:46,564 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:46,565 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:51:46,565 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792004332] [2023-11-06 22:51:46,565 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:46,566 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:46,566 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:46,566 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 4 times [2023-11-06 22:51:46,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:46,567 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1053368119] [2023-11-06 22:51:46,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:46,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:46,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:46,573 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:46,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:46,579 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:46,607 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:46,607 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:51:46,608 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:51:46,608 INFO L87 Difference]: Start difference. First operand 9458 states and 17621 transitions. cyclomatic complexity: 8198 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:47,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:47,171 INFO L93 Difference]: Finished difference Result 9476 states and 17644 transitions. [2023-11-06 22:51:47,172 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9476 states and 17644 transitions. [2023-11-06 22:51:47,223 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:47,258 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9476 states to 9476 states and 17644 transitions. [2023-11-06 22:51:47,258 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9438 [2023-11-06 22:51:47,266 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9438 [2023-11-06 22:51:47,267 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9476 states and 17644 transitions. [2023-11-06 22:51:47,273 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:47,274 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9476 states and 17644 transitions. [2023-11-06 22:51:47,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9476 states and 17644 transitions. [2023-11-06 22:51:47,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9476 to 9464. [2023-11-06 22:51:47,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9464 states, 9464 states have (on average 1.8624260355029585) internal successors, (17626), 9463 states have internal predecessors, (17626), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:47,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9464 states to 9464 states and 17626 transitions. [2023-11-06 22:51:47,442 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9464 states and 17626 transitions. [2023-11-06 22:51:47,442 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:51:47,443 INFO L428 stractBuchiCegarLoop]: Abstraction has 9464 states and 17626 transitions. [2023-11-06 22:51:47,443 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2023-11-06 22:51:47,444 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9464 states and 17626 transitions. [2023-11-06 22:51:47,484 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:47,484 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:47,484 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:47,485 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:47,485 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:47,486 INFO L748 eck$LassoCheckResult]: Stem: 206761#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 206495#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 206496#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 208345#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 200826#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 200827#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 202522#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 202523#L783 assume !(0 == getOrigin_~person#1); 202977#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 204113#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 204114#L409 assume !(0 == initPersonOnFloor_~floor#1); 200419#L436 assume !(1 == initPersonOnFloor_~floor#1); 200420#L463 assume !(2 == initPersonOnFloor_~floor#1); 201570#L490 assume 3 == initPersonOnFloor_~floor#1; 201571#L491 assume !(0 == initPersonOnFloor_~person#1); 203330#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 200266#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 201575#L201 assume !(0 == callOnFloor_~floorID#1); 204153#L204 assume !(1 == callOnFloor_~floorID#1); 201426#L207 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 201427#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 201473#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 201474#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 208321#L783-1 assume !(0 == getOrigin_~person#1); 199327#L787-1 assume !(1 == getOrigin_~person#1); 199329#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 205406#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 208629#L409-1 assume 0 == initPersonOnFloor_~floor#1; 207646#L410-2 assume !(0 == initPersonOnFloor_~person#1); 203734#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 203312#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 208646#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 205915#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 205220#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 205221#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 208156#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 205569#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 200804#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 200805#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 200755#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 200756#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 199881#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 199882#L1942 assume !(0 != timeShift_~tmp___9~2#1); 207500#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 199621#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 199622#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 202044#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 206396#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 206398#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 206738#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 199254#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 200475#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 202701#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 207915#L1730 assume !(1 == ~currentHeading~0); 207053#L1740 assume !(0 == ~currentFloorID~0); 206845#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 206846#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 201187#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 201552#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 201553#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 203322#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 205992#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 200113#L2315-2 [2023-11-06 22:51:47,486 INFO L750 eck$LassoCheckResult]: Loop: 200113#L2315-2 assume !false; 200114#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 206311#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 206312#L2324-2 assume !false; 208350#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 206724#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 200113#L2315-2 [2023-11-06 22:51:47,487 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:47,487 INFO L85 PathProgramCache]: Analyzing trace with hash 543185621, now seen corresponding path program 1 times [2023-11-06 22:51:47,487 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:47,488 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [187614823] [2023-11-06 22:51:47,488 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:47,488 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:47,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:47,628 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:47,628 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:47,628 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [187614823] [2023-11-06 22:51:47,629 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [187614823] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:47,629 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:47,629 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:51:47,629 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2066579503] [2023-11-06 22:51:47,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:47,631 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:47,631 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:47,631 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 5 times [2023-11-06 22:51:47,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:47,632 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [724858904] [2023-11-06 22:51:47,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:47,632 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:47,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:47,638 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:47,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:47,643 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:47,666 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:47,666 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:51:47,666 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:51:47,667 INFO L87 Difference]: Start difference. First operand 9464 states and 17626 transitions. cyclomatic complexity: 8197 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 4 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:48,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:48,116 INFO L93 Difference]: Finished difference Result 9482 states and 17647 transitions. [2023-11-06 22:51:48,116 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9482 states and 17647 transitions. [2023-11-06 22:51:48,160 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:48,192 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9482 states to 9482 states and 17647 transitions. [2023-11-06 22:51:48,192 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9444 [2023-11-06 22:51:48,202 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9444 [2023-11-06 22:51:48,202 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9482 states and 17647 transitions. [2023-11-06 22:51:48,213 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:48,213 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9482 states and 17647 transitions. [2023-11-06 22:51:48,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9482 states and 17647 transitions. [2023-11-06 22:51:48,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9482 to 9472. [2023-11-06 22:51:48,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9472 states, 9472 states have (on average 1.8615920608108107) internal successors, (17633), 9471 states have internal predecessors, (17633), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:48,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9472 states to 9472 states and 17633 transitions. [2023-11-06 22:51:48,384 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9472 states and 17633 transitions. [2023-11-06 22:51:48,384 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:51:48,385 INFO L428 stractBuchiCegarLoop]: Abstraction has 9472 states and 17633 transitions. [2023-11-06 22:51:48,385 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2023-11-06 22:51:48,385 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9472 states and 17633 transitions. [2023-11-06 22:51:48,549 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:48,549 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:48,549 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:48,550 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:48,550 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:48,551 INFO L748 eck$LassoCheckResult]: Stem: 225720#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 225453#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 225454#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 227304#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 219781#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 219782#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 221479#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 221480#L783 assume !(0 == getOrigin_~person#1); 221933#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 223070#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 223071#L409 assume !(0 == initPersonOnFloor_~floor#1); 219374#L436 assume !(1 == initPersonOnFloor_~floor#1); 219375#L463 assume !(2 == initPersonOnFloor_~floor#1); 220525#L490 assume 3 == initPersonOnFloor_~floor#1; 220526#L491 assume !(0 == initPersonOnFloor_~person#1); 222286#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 219221#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 220529#L201 assume !(0 == callOnFloor_~floorID#1); 223109#L204 assume !(1 == callOnFloor_~floorID#1); 220381#L207 assume !(2 == callOnFloor_~floorID#1); 220382#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 221068#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 220427#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 220428#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 227280#L783-1 assume !(0 == getOrigin_~person#1); 218285#L787-1 assume !(1 == getOrigin_~person#1); 218287#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 224364#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 227589#L409-1 assume 0 == initPersonOnFloor_~floor#1; 226604#L410-2 assume !(0 == initPersonOnFloor_~person#1); 222691#L413-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 222268#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 227607#L201-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 224873#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 224178#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 224179#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 227115#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 224527#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 219759#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 219760#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 219710#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 219711#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 218839#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 218840#L1942 assume !(0 != timeShift_~tmp___9~2#1); 226458#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 218576#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 218577#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 220999#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 225354#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 225356#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 225696#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 218209#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 219430#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 221657#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 226874#L1730 assume !(1 == ~currentHeading~0); 226011#L1740 assume !(0 == ~currentFloorID~0); 225803#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 225804#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 220142#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 220506#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 220507#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 222278#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 224950#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 219068#L2315-2 [2023-11-06 22:51:48,551 INFO L750 eck$LassoCheckResult]: Loop: 219068#L2315-2 assume !false; 219069#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 225269#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 225270#L2324-2 assume !false; 227309#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 225682#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 219068#L2315-2 [2023-11-06 22:51:48,552 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:48,552 INFO L85 PathProgramCache]: Analyzing trace with hash -2124486854, now seen corresponding path program 1 times [2023-11-06 22:51:48,552 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:48,552 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [21356323] [2023-11-06 22:51:48,553 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:48,553 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:48,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:48,707 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:48,708 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:48,708 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [21356323] [2023-11-06 22:51:48,708 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [21356323] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:48,708 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:48,709 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:51:48,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558129258] [2023-11-06 22:51:48,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:48,709 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:48,710 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:48,710 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 6 times [2023-11-06 22:51:48,710 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:48,711 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558498929] [2023-11-06 22:51:48,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:48,711 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:48,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:48,715 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:48,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:48,720 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:48,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:48,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:48,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:48,746 INFO L87 Difference]: Start difference. First operand 9472 states and 17633 transitions. cyclomatic complexity: 8196 Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:49,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:49,350 INFO L93 Difference]: Finished difference Result 13244 states and 24664 transitions. [2023-11-06 22:51:49,350 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13244 states and 24664 transitions. [2023-11-06 22:51:49,416 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4392 [2023-11-06 22:51:49,460 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13244 states to 13244 states and 24664 transitions. [2023-11-06 22:51:49,460 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13206 [2023-11-06 22:51:49,472 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13206 [2023-11-06 22:51:49,472 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13244 states and 24664 transitions. [2023-11-06 22:51:49,500 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:49,501 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13244 states and 24664 transitions. [2023-11-06 22:51:49,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13244 states and 24664 transitions. [2023-11-06 22:51:49,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13244 to 9458. [2023-11-06 22:51:49,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9458 states, 9458 states have (on average 1.86159864664834) internal successors, (17607), 9457 states have internal predecessors, (17607), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:49,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9458 states to 9458 states and 17607 transitions. [2023-11-06 22:51:49,736 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9458 states and 17607 transitions. [2023-11-06 22:51:49,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:51:49,738 INFO L428 stractBuchiCegarLoop]: Abstraction has 9458 states and 17607 transitions. [2023-11-06 22:51:49,740 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2023-11-06 22:51:49,740 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9458 states and 17607 transitions. [2023-11-06 22:51:49,780 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:49,780 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:49,781 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:49,782 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:49,782 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:49,782 INFO L748 eck$LassoCheckResult]: Stem: 248440#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 248174#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 248175#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 250022#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 242510#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 242511#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 244212#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 244213#L783 assume !(0 == getOrigin_~person#1); 244663#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 245795#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 245796#L409 assume !(0 == initPersonOnFloor_~floor#1); 242103#L436 assume !(1 == initPersonOnFloor_~floor#1); 242104#L463 assume !(2 == initPersonOnFloor_~floor#1); 243254#L490 assume 3 == initPersonOnFloor_~floor#1; 243255#L491 assume !(0 == initPersonOnFloor_~person#1); 245013#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 241950#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 243258#L201 assume !(0 == callOnFloor_~floorID#1); 245834#L204 assume !(1 == callOnFloor_~floorID#1); 243110#L207 assume !(2 == callOnFloor_~floorID#1); 243111#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 243798#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 243156#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 243157#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 249998#L783-1 assume !(0 == getOrigin_~person#1); 241014#L787-1 assume !(1 == getOrigin_~person#1); 241015#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 241902#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 241903#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 245977#L436-1 assume 1 == initPersonOnFloor_~floor#1; 245978#L437-2 assume !(0 == initPersonOnFloor_~person#1); 248246#L440-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 244985#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 250308#L201-2 assume !(0 == callOnFloor_~floorID#1); 250306#L204-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 247594#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 246903#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 246904#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 249834#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 247250#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 242488#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 242489#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 242441#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 242442#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 241570#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 241571#L1942 assume !(0 != timeShift_~tmp___9~2#1); 249177#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 241304#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 241305#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 243732#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 248075#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 248077#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 248416#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 240938#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 242159#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 244387#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 249592#L1730 assume !(1 == ~currentHeading~0); 248731#L1740 assume !(0 == ~currentFloorID~0); 248523#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 248524#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 242871#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 243235#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 243236#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 245005#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 247671#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 241798#L2315-2 [2023-11-06 22:51:49,783 INFO L750 eck$LassoCheckResult]: Loop: 241798#L2315-2 assume !false; 241799#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 247990#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 247991#L2324-2 assume !false; 250027#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 248402#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 241798#L2315-2 [2023-11-06 22:51:49,783 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:49,783 INFO L85 PathProgramCache]: Analyzing trace with hash -687220060, now seen corresponding path program 1 times [2023-11-06 22:51:49,784 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:49,784 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [697504426] [2023-11-06 22:51:49,784 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:49,784 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:49,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:49,974 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:49,974 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:49,974 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [697504426] [2023-11-06 22:51:49,975 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [697504426] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:49,975 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:49,975 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:51:49,975 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [757812914] [2023-11-06 22:51:49,976 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:49,976 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:49,977 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:49,977 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 7 times [2023-11-06 22:51:49,977 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:49,977 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1447255976] [2023-11-06 22:51:49,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:49,978 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:49,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:49,983 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:49,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:49,989 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:50,014 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:50,014 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:50,014 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:50,015 INFO L87 Difference]: Start difference. First operand 9458 states and 17607 transitions. cyclomatic complexity: 8184 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:50,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:50,653 INFO L93 Difference]: Finished difference Result 13227 states and 24632 transitions. [2023-11-06 22:51:50,654 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13227 states and 24632 transitions. [2023-11-06 22:51:50,703 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 4392 [2023-11-06 22:51:50,737 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13227 states to 13227 states and 24632 transitions. [2023-11-06 22:51:50,741 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13189 [2023-11-06 22:51:50,749 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13189 [2023-11-06 22:51:50,749 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13227 states and 24632 transitions. [2023-11-06 22:51:50,752 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:50,752 INFO L218 hiAutomatonCegarLoop]: Abstraction has 13227 states and 24632 transitions. [2023-11-06 22:51:50,770 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13227 states and 24632 transitions. [2023-11-06 22:51:50,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13227 to 9452. [2023-11-06 22:51:50,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9452 states, 9452 states have (on average 1.861404993652137) internal successors, (17594), 9451 states have internal predecessors, (17594), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:50,936 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9452 states to 9452 states and 17594 transitions. [2023-11-06 22:51:50,937 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9452 states and 17594 transitions. [2023-11-06 22:51:50,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:51:50,938 INFO L428 stractBuchiCegarLoop]: Abstraction has 9452 states and 17594 transitions. [2023-11-06 22:51:50,938 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2023-11-06 22:51:50,938 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9452 states and 17594 transitions. [2023-11-06 22:51:50,977 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:50,977 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:50,977 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:50,978 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:50,978 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:50,979 INFO L748 eck$LassoCheckResult]: Stem: 271133#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 270870#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 270871#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 272719#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 265208#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 265209#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 266906#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 266907#L783 assume !(0 == getOrigin_~person#1); 267359#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 268490#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 268491#L409 assume !(0 == initPersonOnFloor_~floor#1); 264801#L436 assume !(1 == initPersonOnFloor_~floor#1); 264802#L463 assume !(2 == initPersonOnFloor_~floor#1); 265951#L490 assume 3 == initPersonOnFloor_~floor#1; 265952#L491 assume !(0 == initPersonOnFloor_~person#1); 267709#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 264648#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 265956#L201 assume !(0 == callOnFloor_~floorID#1); 268530#L204 assume !(1 == callOnFloor_~floorID#1); 265808#L207 assume !(2 == callOnFloor_~floorID#1); 265809#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 266496#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 265854#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 265855#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 272695#L783-1 assume !(0 == getOrigin_~person#1); 263707#L787-1 assume !(1 == getOrigin_~person#1); 263708#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 264600#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 264601#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 268673#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 268674#L463-1 assume 2 == initPersonOnFloor_~floor#1; 270024#L464-2 assume !(0 == initPersonOnFloor_~person#1); 270025#L467-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 269146#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 273005#L201-2 assume !(0 == callOnFloor_~floorID#1); 273004#L204-2 assume !(1 == callOnFloor_~floorID#1); 273003#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 270290#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 269595#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 269596#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 272529#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 269941#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 265186#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 265187#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 265137#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 265138#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 264262#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 264263#L1942 assume !(0 != timeShift_~tmp___9~2#1); 271872#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 264002#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 264003#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 266427#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 270771#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 270773#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 271111#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 263636#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 264857#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 267085#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 272288#L1730 assume !(1 == ~currentHeading~0); 271425#L1740 assume !(0 == ~currentFloorID~0); 271217#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 271218#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 265569#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 265933#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 265934#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 267701#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 270367#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 264494#L2315-2 [2023-11-06 22:51:50,979 INFO L750 eck$LassoCheckResult]: Loop: 264494#L2315-2 assume !false; 264495#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 270686#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 270687#L2324-2 assume !false; 272724#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 271097#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 264494#L2315-2 [2023-11-06 22:51:50,980 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:50,980 INFO L85 PathProgramCache]: Analyzing trace with hash -831097181, now seen corresponding path program 1 times [2023-11-06 22:51:50,980 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:50,980 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1640110168] [2023-11-06 22:51:50,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:50,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:51,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:51,109 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:51,110 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:51,110 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1640110168] [2023-11-06 22:51:51,110 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1640110168] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:51,110 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:51,110 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:51:51,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1703870415] [2023-11-06 22:51:51,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:51,111 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:51,112 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:51,112 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 8 times [2023-11-06 22:51:51,112 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:51,112 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [992277426] [2023-11-06 22:51:51,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:51,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:51,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:51,117 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:51,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:51,121 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:51,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:51,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:51:51,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:51:51,145 INFO L87 Difference]: Start difference. First operand 9452 states and 17594 transitions. cyclomatic complexity: 8177 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:51,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:51,713 INFO L93 Difference]: Finished difference Result 9461 states and 17597 transitions. [2023-11-06 22:51:51,714 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9461 states and 17597 transitions. [2023-11-06 22:51:51,762 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:51,786 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9461 states to 9461 states and 17597 transitions. [2023-11-06 22:51:51,787 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9423 [2023-11-06 22:51:51,794 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9423 [2023-11-06 22:51:51,794 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9461 states and 17597 transitions. [2023-11-06 22:51:51,800 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:51,801 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9461 states and 17597 transitions. [2023-11-06 22:51:51,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9461 states and 17597 transitions. [2023-11-06 22:51:51,916 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9461 to 9452. [2023-11-06 22:51:51,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9452 states, 9452 states have (on average 1.8605586119339823) internal successors, (17586), 9451 states have internal predecessors, (17586), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:51,957 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9452 states to 9452 states and 17586 transitions. [2023-11-06 22:51:51,957 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9452 states and 17586 transitions. [2023-11-06 22:51:51,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-06 22:51:51,960 INFO L428 stractBuchiCegarLoop]: Abstraction has 9452 states and 17586 transitions. [2023-11-06 22:51:51,960 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2023-11-06 22:51:51,960 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9452 states and 17586 transitions. [2023-11-06 22:51:51,999 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 2380 [2023-11-06 22:51:51,999 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:51,999 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:52,001 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:52,001 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:52,001 INFO L748 eck$LassoCheckResult]: Stem: 290051#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 289787#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 289788#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 291633#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 284127#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 284128#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 285827#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 285828#L783 assume !(0 == getOrigin_~person#1); 286281#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 287411#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 287412#L409 assume !(0 == initPersonOnFloor_~floor#1); 283719#L436 assume !(1 == initPersonOnFloor_~floor#1); 283720#L463 assume !(2 == initPersonOnFloor_~floor#1); 284870#L490 assume 3 == initPersonOnFloor_~floor#1; 284871#L491 assume !(0 == initPersonOnFloor_~person#1); 286629#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 283566#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 284875#L201 assume !(0 == callOnFloor_~floorID#1); 287450#L204 assume !(1 == callOnFloor_~floorID#1); 284727#L207 assume !(2 == callOnFloor_~floorID#1); 284728#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 285416#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 284773#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 284774#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 291609#L783-1 assume !(0 == getOrigin_~person#1); 282629#L787-1 assume !(1 == getOrigin_~person#1); 282630#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 283518#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 283519#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 287593#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 287594#L463-1 assume 2 == initPersonOnFloor_~floor#1; 288941#L464-2 assume !(0 == initPersonOnFloor_~person#1); 288942#L467-2 assume !(1 == initPersonOnFloor_~person#1); 289173#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 288065#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 291921#L201-2 assume !(0 == callOnFloor_~floorID#1); 291920#L204-2 assume !(1 == callOnFloor_~floorID#1); 291919#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 289207#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 288516#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 288517#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 291443#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 288862#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 284105#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 284106#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 284056#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 284057#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 283181#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 283182#L1942 assume !(0 != timeShift_~tmp___9~2#1); 290788#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 282922#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 282923#L1695 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 285347#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 289688#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 289690#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 290028#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 282556#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 283775#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 286005#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 291202#L1730 assume !(1 == ~currentHeading~0); 290342#L1740 assume !(0 == ~currentFloorID~0); 290134#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 290135#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 284488#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 284852#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 284853#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 286621#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 289284#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 283412#L2315-2 [2023-11-06 22:51:52,002 INFO L750 eck$LassoCheckResult]: Loop: 283412#L2315-2 assume !false; 283413#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 289603#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 289604#L2324-2 assume !false; 291638#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 290014#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 283412#L2315-2 [2023-11-06 22:51:52,002 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:52,003 INFO L85 PathProgramCache]: Analyzing trace with hash -613336580, now seen corresponding path program 1 times [2023-11-06 22:51:52,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:52,004 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927631199] [2023-11-06 22:51:52,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:52,005 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:52,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:52,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:52,144 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:52,144 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927631199] [2023-11-06 22:51:52,145 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1927631199] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:52,145 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:52,145 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:51:52,145 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1506882254] [2023-11-06 22:51:52,145 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:52,146 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:52,146 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:52,146 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 9 times [2023-11-06 22:51:52,147 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:52,147 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1913014255] [2023-11-06 22:51:52,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:52,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:52,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:52,151 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:52,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:52,155 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:52,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:52,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:51:52,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:52,180 INFO L87 Difference]: Start difference. First operand 9452 states and 17586 transitions. cyclomatic complexity: 8169 Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 2 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:53,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:53,115 INFO L93 Difference]: Finished difference Result 17654 states and 32745 transitions. [2023-11-06 22:51:53,116 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17654 states and 32745 transitions. [2023-11-06 22:51:53,312 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4686 [2023-11-06 22:51:53,360 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17654 states to 17654 states and 32745 transitions. [2023-11-06 22:51:53,360 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17580 [2023-11-06 22:51:53,371 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17580 [2023-11-06 22:51:53,371 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17654 states and 32745 transitions. [2023-11-06 22:51:53,372 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:53,372 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17654 states and 32745 transitions. [2023-11-06 22:51:53,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17654 states and 32745 transitions. [2023-11-06 22:51:53,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17654 to 17652. [2023-11-06 22:51:53,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17652 states, 17652 states have (on average 1.8549172898255155) internal successors, (32743), 17651 states have internal predecessors, (32743), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:53,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17652 states to 17652 states and 32743 transitions. [2023-11-06 22:51:53,634 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17652 states and 32743 transitions. [2023-11-06 22:51:53,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:51:53,635 INFO L428 stractBuchiCegarLoop]: Abstraction has 17652 states and 32743 transitions. [2023-11-06 22:51:53,635 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2023-11-06 22:51:53,635 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17652 states and 32743 transitions. [2023-11-06 22:51:53,687 INFO L131 ngComponentsAnalysis]: Automaton has 65 accepting balls. 4686 [2023-11-06 22:51:53,688 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:53,688 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:53,689 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:53,689 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:53,689 INFO L748 eck$LassoCheckResult]: Stem: 317270#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 316997#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 316998#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 318961#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 311238#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 311239#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 312950#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 312951#L783 assume !(0 == getOrigin_~person#1); 313404#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 314554#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 314555#L409 assume !(0 == initPersonOnFloor_~floor#1); 310830#L436 assume !(1 == initPersonOnFloor_~floor#1); 310831#L463 assume !(2 == initPersonOnFloor_~floor#1); 311987#L490 assume 3 == initPersonOnFloor_~floor#1; 311988#L491 assume !(0 == initPersonOnFloor_~person#1); 313756#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 310677#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 311991#L201 assume !(0 == callOnFloor_~floorID#1); 314594#L204 assume !(1 == callOnFloor_~floorID#1); 311842#L207 assume !(2 == callOnFloor_~floorID#1); 311843#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 312533#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 311887#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 311888#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 318932#L783-1 assume !(0 == getOrigin_~person#1); 309744#L787-1 assume !(1 == getOrigin_~person#1); 309745#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 310629#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 310630#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 314739#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 314740#L463-1 assume 2 == initPersonOnFloor_~floor#1; 316113#L464-2 assume !(0 == initPersonOnFloor_~person#1); 316114#L467-2 assume !(1 == initPersonOnFloor_~person#1); 316351#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 315220#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 319320#L201-2 assume !(0 == callOnFloor_~floorID#1); 319319#L204-2 assume !(1 == callOnFloor_~floorID#1); 319318#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 316388#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 315674#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 315675#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 318757#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 316033#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 311215#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 311216#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 311169#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 311170#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 310298#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 310299#L1942 assume !(0 != timeShift_~tmp___9~2#1); 318050#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 310033#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 310034#L1695 assume !(0 != ~floorButtons_0~0); 318493#L1699 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 312467#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 316887#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 316889#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 317246#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 309668#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 310887#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 313126#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 318495#L1730 assume !(1 == ~currentHeading~0); 317576#L1740 assume !(0 == ~currentFloorID~0); 317356#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 317357#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 311603#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 311967#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 311968#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 313748#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 316468#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 310524#L2315-2 [2023-11-06 22:51:53,690 INFO L750 eck$LassoCheckResult]: Loop: 310524#L2315-2 assume !false; 310525#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 316799#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 316800#L2324-2 assume !false; 318968#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 317231#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 310524#L2315-2 [2023-11-06 22:51:53,690 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:53,691 INFO L85 PathProgramCache]: Analyzing trace with hash 1052748502, now seen corresponding path program 1 times [2023-11-06 22:51:53,691 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:53,691 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1506566468] [2023-11-06 22:51:53,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:53,691 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:53,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:53,763 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:53,763 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:53,763 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1506566468] [2023-11-06 22:51:53,763 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1506566468] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:53,764 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:53,764 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:51:53,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1028286453] [2023-11-06 22:51:53,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:53,765 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:53,765 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:53,765 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 10 times [2023-11-06 22:51:53,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:53,766 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [592471114] [2023-11-06 22:51:53,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:53,766 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:53,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:53,770 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:53,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:53,774 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:53,797 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:53,797 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:51:53,797 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:53,797 INFO L87 Difference]: Start difference. First operand 17652 states and 32743 transitions. cyclomatic complexity: 15160 Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 2 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:55,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:55,166 INFO L93 Difference]: Finished difference Result 33960 states and 62807 transitions. [2023-11-06 22:51:55,166 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33960 states and 62807 transitions. [2023-11-06 22:51:55,346 INFO L131 ngComponentsAnalysis]: Automaton has 129 accepting balls. 9276 [2023-11-06 22:51:55,464 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33960 states to 33960 states and 62807 transitions. [2023-11-06 22:51:55,464 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33818 [2023-11-06 22:51:55,489 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33818 [2023-11-06 22:51:55,490 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33960 states and 62807 transitions. [2023-11-06 22:51:55,490 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:55,490 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33960 states and 62807 transitions. [2023-11-06 22:51:55,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33960 states and 62807 transitions. [2023-11-06 22:51:56,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33960 to 33956. [2023-11-06 22:51:56,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33956 states, 33956 states have (on average 1.8495405819295558) internal successors, (62803), 33955 states have internal predecessors, (62803), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:56,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33956 states to 33956 states and 62803 transitions. [2023-11-06 22:51:56,325 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33956 states and 62803 transitions. [2023-11-06 22:51:56,327 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:51:56,327 INFO L428 stractBuchiCegarLoop]: Abstraction has 33956 states and 62803 transitions. [2023-11-06 22:51:56,327 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2023-11-06 22:51:56,327 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33956 states and 62803 transitions. [2023-11-06 22:51:56,423 INFO L131 ngComponentsAnalysis]: Automaton has 129 accepting balls. 9276 [2023-11-06 22:51:56,423 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:51:56,423 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:51:56,424 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:56,424 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:51:56,424 INFO L748 eck$LassoCheckResult]: Stem: 368927#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 368645#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 368646#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 370658#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 362857#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 362858#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 364573#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 364574#L783 assume !(0 == getOrigin_~person#1); 365028#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 366189#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 366190#L409 assume !(0 == initPersonOnFloor_~floor#1); 362448#L436 assume !(1 == initPersonOnFloor_~floor#1); 362449#L463 assume !(2 == initPersonOnFloor_~floor#1); 363605#L490 assume 3 == initPersonOnFloor_~floor#1; 363606#L491 assume !(0 == initPersonOnFloor_~person#1); 365384#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 362294#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 363609#L201 assume !(0 == callOnFloor_~floorID#1); 366230#L204 assume !(1 == callOnFloor_~floorID#1); 363461#L207 assume !(2 == callOnFloor_~floorID#1); 363462#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 364152#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 363506#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 363507#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 370629#L783-1 assume !(0 == getOrigin_~person#1); 361362#L787-1 assume !(1 == getOrigin_~person#1); 361363#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 362247#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 362248#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 366374#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 366375#L463-1 assume 2 == initPersonOnFloor_~floor#1; 367759#L464-2 assume !(0 == initPersonOnFloor_~person#1); 367760#L467-2 assume !(1 == initPersonOnFloor_~person#1); 368001#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 366854#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 367532#L201-2 assume !(0 == callOnFloor_~floorID#1); 371021#L204-2 assume !(1 == callOnFloor_~floorID#1); 371020#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 368033#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 367313#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 367314#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 370446#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 367678#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 362834#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 362835#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 362788#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 362789#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 361914#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 361915#L1942 assume !(0 != timeShift_~tmp___9~2#1); 369718#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 361650#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 361651#L1695 assume !(0 != ~floorButtons_0~0); 370174#L1699 assume !(0 != ~floorButtons_1~0); 370175#L1703 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 364085#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 368538#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 368540#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 368896#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 361286#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 362505#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 364753#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 370176#L1730 assume !(1 == ~currentHeading~0); 369243#L1740 assume !(0 == ~currentFloorID~0); 369016#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 369017#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 364385#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 383446#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 383447#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 383448#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 383573#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 383571#L2315-2 [2023-11-06 22:51:56,425 INFO L750 eck$LassoCheckResult]: Loop: 383571#L2315-2 assume !false; 383568#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 383566#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 383565#L2324-2 assume !false; 383563#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 383564#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 383571#L2315-2 [2023-11-06 22:51:56,425 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:56,425 INFO L85 PathProgramCache]: Analyzing trace with hash -661607615, now seen corresponding path program 1 times [2023-11-06 22:51:56,425 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:56,425 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2015676127] [2023-11-06 22:51:56,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:56,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:56,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:56,523 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:56,523 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:56,523 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2015676127] [2023-11-06 22:51:56,523 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2015676127] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:56,524 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:56,524 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:51:56,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [376285963] [2023-11-06 22:51:56,524 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:56,525 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:51:56,525 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:56,525 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 11 times [2023-11-06 22:51:56,525 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:56,526 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [622923889] [2023-11-06 22:51:56,526 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:56,526 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:56,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:56,532 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:51:56,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:51:56,540 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:51:56,563 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:56,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:51:56,564 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:56,564 INFO L87 Difference]: Start difference. First operand 33956 states and 62803 transitions. cyclomatic complexity: 28984 Second operand has 3 states, 3 states have (on average 23.333333333333332) internal successors, (70), 2 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:58,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:58,120 INFO L93 Difference]: Finished difference Result 66364 states and 122378 transitions. [2023-11-06 22:51:58,120 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66364 states and 122378 transitions. [2023-11-06 22:51:58,382 INFO L131 ngComponentsAnalysis]: Automaton has 257 accepting balls. 18402 [2023-11-06 22:51:58,566 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66364 states to 66364 states and 122378 transitions. [2023-11-06 22:51:58,566 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66090 [2023-11-06 22:51:58,602 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66090 [2023-11-06 22:51:58,603 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66364 states and 122378 transitions. [2023-11-06 22:51:58,603 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:51:58,603 INFO L218 hiAutomatonCegarLoop]: Abstraction has 66364 states and 122378 transitions. [2023-11-06 22:51:58,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66364 states and 122378 transitions. [2023-11-06 22:51:59,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66364 to 66356. [2023-11-06 22:51:59,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66356 states, 66356 states have (on average 1.844143709687142) internal successors, (122370), 66355 states have internal predecessors, (122370), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:59,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66356 states to 66356 states and 122370 transitions. [2023-11-06 22:51:59,697 INFO L240 hiAutomatonCegarLoop]: Abstraction has 66356 states and 122370 transitions. [2023-11-06 22:51:59,697 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:51:59,698 INFO L428 stractBuchiCegarLoop]: Abstraction has 66356 states and 122370 transitions. [2023-11-06 22:51:59,698 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2023-11-06 22:51:59,698 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66356 states and 122370 transitions. [2023-11-06 22:52:00,343 INFO L131 ngComponentsAnalysis]: Automaton has 257 accepting balls. 18402 [2023-11-06 22:52:00,343 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:52:00,343 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:52:00,346 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:00,372 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:52:00,374 INFO L748 eck$LassoCheckResult]: Stem: 469348#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 469059#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 469060#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 471207#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 463178#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 463179#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 464904#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 464905#L783 assume !(0 == getOrigin_~person#1); 465364#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 466534#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 466535#L409 assume !(0 == initPersonOnFloor_~floor#1); 462771#L436 assume !(1 == initPersonOnFloor_~floor#1); 462772#L463 assume !(2 == initPersonOnFloor_~floor#1); 463934#L490 assume 3 == initPersonOnFloor_~floor#1; 463935#L491 assume !(0 == initPersonOnFloor_~person#1); 465728#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 462618#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 463940#L201 assume !(0 == callOnFloor_~floorID#1); 466575#L204 assume !(1 == callOnFloor_~floorID#1); 463789#L207 assume !(2 == callOnFloor_~floorID#1); 463790#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 464487#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 463834#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 463835#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 471179#L783-1 assume !(0 == getOrigin_~person#1); 461683#L787-1 assume !(1 == getOrigin_~person#1); 461684#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 462571#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 462572#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 466723#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 466724#L463-1 assume 2 == initPersonOnFloor_~floor#1; 468143#L464-2 assume !(0 == initPersonOnFloor_~person#1); 468144#L467-2 assume !(1 == initPersonOnFloor_~person#1); 468387#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 467220#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 467904#L201-2 assume !(0 == callOnFloor_~floorID#1); 471647#L204-2 assume !(1 == callOnFloor_~floorID#1); 471646#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 468424#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 467685#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 467686#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 470982#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 468051#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 463155#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 463156#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 463107#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 463108#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 462234#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 462235#L1942 assume !(0 != timeShift_~tmp___9~2#1); 470188#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 461976#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 461977#L1695 assume !(0 != ~floorButtons_0~0); 470686#L1699 assume !(0 != ~floorButtons_1~0); 470687#L1703 assume !(0 != ~floorButtons_2~0); 464416#L1707 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~16#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 464417#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 468944#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 468946#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 469322#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 461612#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 462827#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 465091#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 470688#L1730 assume !(1 == ~currentHeading~0); 469675#L1740 assume !(0 == ~currentFloorID~0); 469435#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 469436#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 464721#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 485308#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 485309#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 485310#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 486705#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 486698#L2315-2 [2023-11-06 22:52:00,375 INFO L750 eck$LassoCheckResult]: Loop: 486698#L2315-2 assume !false; 486696#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 486689#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 486687#L2324-2 assume !false; 486682#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 486683#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 486698#L2315-2 [2023-11-06 22:52:00,375 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:00,376 INFO L85 PathProgramCache]: Analyzing trace with hash 204541499, now seen corresponding path program 1 times [2023-11-06 22:52:00,376 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:00,379 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326934825] [2023-11-06 22:52:00,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:00,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:00,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:00,508 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:00,508 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:00,511 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326934825] [2023-11-06 22:52:00,512 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326934825] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:00,512 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:00,512 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:52:00,512 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [270725852] [2023-11-06 22:52:00,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:00,515 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:52:00,516 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:00,516 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 12 times [2023-11-06 22:52:00,516 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:00,516 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [476567874] [2023-11-06 22:52:00,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:00,517 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:00,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:52:00,531 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:52:00,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:52:00,537 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:52:00,561 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:00,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:52:00,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:52:00,562 INFO L87 Difference]: Start difference. First operand 66356 states and 122370 transitions. cyclomatic complexity: 56287 Second operand has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 2 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:02,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:02,308 INFO L93 Difference]: Finished difference Result 130740 states and 240369 transitions. [2023-11-06 22:52:02,308 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130740 states and 240369 transitions. [2023-11-06 22:52:03,617 INFO L131 ngComponentsAnalysis]: Automaton has 513 accepting balls. 36536 [2023-11-06 22:52:04,044 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130740 states to 130740 states and 240369 transitions. [2023-11-06 22:52:04,044 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130210 [2023-11-06 22:52:04,128 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130210 [2023-11-06 22:52:04,128 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130740 states and 240369 transitions. [2023-11-06 22:52:04,129 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:52:04,129 INFO L218 hiAutomatonCegarLoop]: Abstraction has 130740 states and 240369 transitions. [2023-11-06 22:52:04,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130740 states and 240369 transitions. [2023-11-06 22:52:06,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130740 to 130724. [2023-11-06 22:52:06,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130724 states, 130724 states have (on average 1.8386294789021145) internal successors, (240353), 130723 states have internal predecessors, (240353), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:06,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130724 states to 130724 states and 240353 transitions. [2023-11-06 22:52:06,641 INFO L240 hiAutomatonCegarLoop]: Abstraction has 130724 states and 240353 transitions. [2023-11-06 22:52:06,641 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:52:06,642 INFO L428 stractBuchiCegarLoop]: Abstraction has 130724 states and 240353 transitions. [2023-11-06 22:52:06,642 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2023-11-06 22:52:06,642 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 130724 states and 240353 transitions. [2023-11-06 22:52:07,006 INFO L131 ngComponentsAnalysis]: Automaton has 513 accepting balls. 36536 [2023-11-06 22:52:07,006 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:52:07,006 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:52:07,007 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:07,007 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:52:07,007 INFO L748 eck$LassoCheckResult]: Stem: 666658#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 666352#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 666353#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 668669#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 660291#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 660292#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 662021#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 662022#L783 assume !(0 == getOrigin_~person#1); 662495#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 663691#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 663692#L409 assume !(0 == initPersonOnFloor_~floor#1); 659879#L436 assume !(1 == initPersonOnFloor_~floor#1); 659880#L463 assume !(2 == initPersonOnFloor_~floor#1); 661047#L490 assume 3 == initPersonOnFloor_~floor#1; 661048#L491 assume !(0 == initPersonOnFloor_~person#1); 662866#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 659723#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 661052#L201 assume !(0 == callOnFloor_~floorID#1); 663735#L204 assume !(1 == callOnFloor_~floorID#1); 660899#L207 assume !(2 == callOnFloor_~floorID#1); 660900#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 661598#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 660946#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 660947#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 668631#L783-1 assume !(0 == getOrigin_~person#1); 658784#L787-1 assume !(1 == getOrigin_~person#1); 658785#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 659676#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 659677#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 663886#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 663887#L463-1 assume 2 == initPersonOnFloor_~floor#1; 665361#L464-2 assume !(0 == initPersonOnFloor_~person#1); 665362#L467-2 assume !(1 == initPersonOnFloor_~person#1); 665627#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 664394#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 665118#L201-2 assume !(0 == callOnFloor_~floorID#1); 669273#L204-2 assume !(1 == callOnFloor_~floorID#1); 669272#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 665665#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 664883#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 664884#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 668418#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 665271#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 660267#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 660268#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 660218#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 660219#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 659336#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 659337#L1942 assume !(0 != timeShift_~tmp___9~2#1); 667564#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 659078#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 659079#L1695 assume !(0 != ~floorButtons_0~0); 668080#L1699 assume !(0 != ~floorButtons_1~0); 668081#L1703 assume !(0 != ~floorButtons_2~0); 661528#L1707 assume !(0 != ~floorButtons_3~0); 661529#L1711 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~16#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 667160#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 666228#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 666230#L1315-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 666630#L1484-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 658714#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 659938#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 662214#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 668082#L1730 assume !(1 == ~currentHeading~0); 667008#L1740 assume !(0 == ~currentFloorID~0); 666757#L1740-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 666758#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 660652#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 661026#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 661027#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 662858#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 716586#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 716587#L2315-2 [2023-11-06 22:52:07,007 INFO L750 eck$LassoCheckResult]: Loop: 716587#L2315-2 assume !false; 716590#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 716591#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 716599#L2324-2 assume !false; 716596#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 716593#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 716587#L2315-2 [2023-11-06 22:52:07,008 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:07,008 INFO L85 PathProgramCache]: Analyzing trace with hash -2126373752, now seen corresponding path program 1 times [2023-11-06 22:52:07,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:07,008 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1574012206] [2023-11-06 22:52:07,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:07,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:07,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:07,993 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:07,994 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:07,994 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1574012206] [2023-11-06 22:52:07,994 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1574012206] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:07,995 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:07,995 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:52:07,995 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414809284] [2023-11-06 22:52:07,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:07,996 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:52:07,996 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:07,996 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 13 times [2023-11-06 22:52:07,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:07,997 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612031109] [2023-11-06 22:52:07,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:07,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:08,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:52:08,005 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:52:08,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:52:08,011 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:52:08,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:08,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:52:08,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:52:08,038 INFO L87 Difference]: Start difference. First operand 130724 states and 240353 transitions. cyclomatic complexity: 110174 Second operand has 5 states, 5 states have (on average 14.4) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:11,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:11,137 INFO L93 Difference]: Finished difference Result 219711 states and 402440 transitions. [2023-11-06 22:52:11,138 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 219711 states and 402440 transitions. [2023-11-06 22:52:12,264 INFO L131 ngComponentsAnalysis]: Automaton has 905 accepting balls. 68494 [2023-11-06 22:52:13,770 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 219711 states to 219711 states and 402440 transitions. [2023-11-06 22:52:13,770 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 219159 [2023-11-06 22:52:13,921 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 219159 [2023-11-06 22:52:13,921 INFO L73 IsDeterministic]: Start isDeterministic. Operand 219711 states and 402440 transitions. [2023-11-06 22:52:13,923 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2023-11-06 22:52:13,923 INFO L218 hiAutomatonCegarLoop]: Abstraction has 219711 states and 402440 transitions. [2023-11-06 22:52:14,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 219711 states and 402440 transitions. [2023-11-06 22:52:17,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 219711 to 219124. [2023-11-06 22:52:17,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 219124 states, 219124 states have (on average 1.8336832113323962) internal successors, (401804), 219123 states have internal predecessors, (401804), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:17,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 219124 states to 219124 states and 401804 transitions. [2023-11-06 22:52:17,994 INFO L240 hiAutomatonCegarLoop]: Abstraction has 219124 states and 401804 transitions. [2023-11-06 22:52:17,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:52:17,996 INFO L428 stractBuchiCegarLoop]: Abstraction has 219124 states and 401804 transitions. [2023-11-06 22:52:17,996 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2023-11-06 22:52:17,997 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 219124 states and 401804 transitions. [2023-11-06 22:52:19,820 INFO L131 ngComponentsAnalysis]: Automaton has 905 accepting balls. 68318 [2023-11-06 22:52:19,820 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-06 22:52:19,820 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-06 22:52:19,822 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:19,822 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2023-11-06 22:52:19,824 INFO L748 eck$LassoCheckResult]: Stem: 1017032#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~prevDir~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 1016729#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret109#1, main_~retValue_acc~22#1, main_~tmp~24#1;havoc main_~retValue_acc~22#1;havoc main_~tmp~24#1;assume { :begin_inline_select_helpers } true; 1016730#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1019007#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;havoc valid_product_~retValue_acc~24#1;valid_product_~retValue_acc~24#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~24#1; 1010707#valid_product_returnLabel#1 main_#t~ret109#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~24#1;assume { :end_inline_valid_product } true;main_~tmp~24#1 := main_#t~ret109#1;havoc main_#t~ret109#1; 1010708#L2927 assume 0 != main_~tmp~24#1;assume { :begin_inline_setup } true; 1012428#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;havoc aliceCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1012429#L783 assume !(0 == getOrigin_~person#1); 1012897#L787 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1014092#getOrigin_returnLabel#1 aliceCall_#t~ret98#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~17#1 := aliceCall_#t~ret98#1;havoc aliceCall_#t~ret98#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1014093#L409 assume !(0 == initPersonOnFloor_~floor#1); 1010302#L436 assume !(1 == initPersonOnFloor_~floor#1); 1010303#L463 assume !(2 == initPersonOnFloor_~floor#1); 1011452#L490 assume 3 == initPersonOnFloor_~floor#1; 1011453#L491 assume !(0 == initPersonOnFloor_~person#1); 1013259#L494 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 1010149#L517-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1011458#L201 assume !(0 == callOnFloor_~floorID#1); 1014137#L204 assume !(1 == callOnFloor_~floorID#1); 1011306#L207 assume !(2 == callOnFloor_~floorID#1); 1011307#L210 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 1012008#L213-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1011352#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1011353#aliceCall_returnLabel#1 havoc aliceCall_#t~ret98#1, aliceCall_~tmp~17#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;havoc angelinaCall_~tmp~18#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1018980#L783-1 assume !(0 == getOrigin_~person#1); 1009227#L787-1 assume !(1 == getOrigin_~person#1); 1009228#L791-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1010102#getOrigin_returnLabel#2 angelinaCall_#t~ret99#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~18#1 := angelinaCall_#t~ret99#1;havoc angelinaCall_#t~ret99#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~18#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1010103#L409-1 assume !(0 == initPersonOnFloor_~floor#1); 1014291#L436-1 assume !(1 == initPersonOnFloor_~floor#1); 1014292#L463-1 assume 2 == initPersonOnFloor_~floor#1; 1015767#L464-2 assume !(0 == initPersonOnFloor_~person#1); 1015768#L467-2 assume !(1 == initPersonOnFloor_~person#1); 1016024#L470-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 1014798#L517-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1019793#L201-2 assume !(0 == callOnFloor_~floorID#1); 1019792#L204-2 assume !(1 == callOnFloor_~floorID#1); 1019791#L207-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 1016060#L213-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1015281#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1015282#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret99#1, angelinaCall_~tmp~18#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;havoc getCurrentHeading_~retValue_acc~10#1;getCurrentHeading_~retValue_acc~10#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~10#1; 1018761#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret83#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~10#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret83#1;havoc __utac_acc__Specification13_spec__1_#t~ret83#1; 1015672#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret83#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~0#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~0#1 / 3); 1010687#L1792 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;havoc getCurrentFloorID_~retValue_acc~7#1;getCurrentFloorID_~retValue_acc~7#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~7#1; 1010688#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~7#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~9#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~9#1; 1010639#L1128 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~9#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~9#1; 1010640#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~9#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1009775#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~0#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1009776#L1942 assume !(0 != timeShift_~tmp___9~2#1); 1017903#L2033 assume 1 == ~doorState~0;~doorState~0 := 0; 1009516#L2033-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~15#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1; 1009517#L1695 assume !(0 != ~floorButtons_0~0); 1018444#L1699 assume !(0 != ~floorButtons_1~0); 1018445#L1703 assume !(0 != ~floorButtons_2~0); 1011937#L1707 assume !(0 != ~floorButtons_3~0); 1011938#L1711 assume !(0 != ~floorButtons_4~0);isAnyLiftButtonPressed_~retValue_acc~16#1 := 0;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~16#1; 1017511#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret24#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~16#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~6#1; 1016605#L1668 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 1016607#L1315-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1017008#isTopFloor_returnLabel#3 stopRequestedInDirection__wrappee__empty_#t~ret13#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~5#1 := stopRequestedInDirection__wrappee__empty_#t~ret13#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1; 1018956#L1319-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~5#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1; 1011606#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret27#1 := stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret13#1, stopRequestedInDirection__wrappee__empty_#t~ret14#1, stopRequestedInDirection__wrappee__empty_#t~ret15#1, stopRequestedInDirection__wrappee__empty_#t~ret16#1, stopRequestedInDirection__wrappee__empty_#t~ret17#1, stopRequestedInDirection__wrappee__empty_#t~ret18#1, stopRequestedInDirection__wrappee__empty_#t~ret19#1, stopRequestedInDirection__wrappee__empty_#t~ret20#1, stopRequestedInDirection__wrappee__empty_#t~ret21#1, stopRequestedInDirection__wrappee__empty_#t~ret22#1, stopRequestedInDirection__wrappee__empty_#t~ret23#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~14#1, stopRequestedInDirection__wrappee__empty_~tmp~5#1, stopRequestedInDirection__wrappee__empty_~tmp___0~1#1, stopRequestedInDirection__wrappee__empty_~tmp___1~1#1, stopRequestedInDirection__wrappee__empty_~tmp___2~1#1, stopRequestedInDirection__wrappee__empty_~tmp___3~1#1, stopRequestedInDirection__wrappee__empty_~tmp___4~0#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~15#1 := stopRequestedInDirection_#t~ret27#1;havoc stopRequestedInDirection_#t~ret27#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~15#1; 1010359#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~15#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 1012620#L2041 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 1018446#L1730 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~2#1;isTopFloor_~retValue_acc~2#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~2#1; 1018447#isTopFloor_returnLabel#4 continueInDirection_#t~ret28#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~2#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret28#1;havoc continueInDirection_#t~ret28#1; 1018581#L1734 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 1018582#L1740-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1019663#L1746-1 havoc continueInDirection_#t~ret28#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1019635#L2050-2 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret84#1, __utac_acc__Specification13_spec__2_#t~ret85#1, __utac_acc__Specification13_spec__2_#t~ret86#1, __utac_acc__Specification13_spec__2_#t~ret87#1, __utac_acc__Specification13_spec__2_#t~ret88#1, __utac_acc__Specification13_spec__2_#t~ret89#1, __utac_acc__Specification13_spec__2_~tmp~13#1, __utac_acc__Specification13_spec__2_~tmp___0~7#1, __utac_acc__Specification13_spec__2_~tmp___1~5#1, __utac_acc__Specification13_spec__2_~tmp___2~5#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;havoc __utac_acc__Specification13_spec__2_~tmp~13#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~7#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~2#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~1#1 / 3); 1019628#L2425 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~2#1; 1019629#L2426 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~20#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~20#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 1019634#L2245 assume !(1 == existInLiftCallsInDirection_~d#1); 1019696#L2311 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 1019697#L2315-2 [2023-11-06 22:52:19,824 INFO L750 eck$LassoCheckResult]: Loop: 1019697#L2315-2 assume !false; 1019700#L2316 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 1019701#L2317 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 1019923#L2324-2 assume !false; 1019873#L2325 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 1019874#L2383 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 1019697#L2315-2 [2023-11-06 22:52:19,824 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:19,824 INFO L85 PathProgramCache]: Analyzing trace with hash -652917120, now seen corresponding path program 1 times [2023-11-06 22:52:19,824 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:19,825 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [874805840] [2023-11-06 22:52:19,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:19,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:19,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:19,971 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:19,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:19,972 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [874805840] [2023-11-06 22:52:19,972 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [874805840] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:19,972 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:19,973 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:52:19,973 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1308661027] [2023-11-06 22:52:19,973 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:19,974 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-06 22:52:19,974 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:19,974 INFO L85 PathProgramCache]: Analyzing trace with hash -525105205, now seen corresponding path program 14 times [2023-11-06 22:52:19,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:19,975 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1207271968] [2023-11-06 22:52:19,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:19,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:19,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:52:19,980 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2023-11-06 22:52:19,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2023-11-06 22:52:19,985 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2023-11-06 22:52:20,009 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:20,010 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:52:20,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:52:20,010 INFO L87 Difference]: Start difference. First operand 219124 states and 401804 transitions. cyclomatic complexity: 183619 Second operand has 5 states, 5 states have (on average 14.8) internal successors, (74), 5 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:52:24,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:24,039 INFO L93 Difference]: Finished difference Result 386160 states and 696501 transitions. [2023-11-06 22:52:24,039 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 386160 states and 696501 transitions.