./Ultimate.py --spec /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/properties/termination.prp --file /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 84cfde4a Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c -s /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e7c9485412041f5ced738777edbcc586e5ce326d6f265b136a50fe41e5db19fb --- Real Ultimate output --- This is Ultimate 0.2.5-dev-84cfde4 [2024-10-12 00:46:59,585 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-12 00:46:59,646 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-10-12 00:46:59,648 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-12 00:46:59,649 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-12 00:46:59,669 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-12 00:46:59,669 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-12 00:46:59,669 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-12 00:46:59,669 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-12 00:46:59,670 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-12 00:46:59,670 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-12 00:46:59,670 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-12 00:46:59,670 INFO L153 SettingsManager]: * Use SBE=true [2024-10-12 00:46:59,671 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-10-12 00:46:59,671 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-10-12 00:46:59,672 INFO L153 SettingsManager]: * Use old map elimination=false [2024-10-12 00:46:59,673 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-10-12 00:46:59,675 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-10-12 00:46:59,675 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-10-12 00:46:59,675 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-12 00:46:59,675 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-10-12 00:46:59,676 INFO L153 SettingsManager]: * sizeof long=4 [2024-10-12 00:46:59,676 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-10-12 00:46:59,676 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-10-12 00:46:59,676 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-12 00:46:59,677 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-10-12 00:46:59,677 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-10-12 00:46:59,677 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-10-12 00:46:59,677 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-12 00:46:59,677 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-10-12 00:46:59,677 INFO L153 SettingsManager]: * sizeof long double=12 [2024-10-12 00:46:59,677 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-12 00:46:59,677 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-10-12 00:46:59,678 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-12 00:46:59,678 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-12 00:46:59,678 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-12 00:46:59,678 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-12 00:46:59,679 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-10-12 00:46:59,679 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-10-12 00:46:59,679 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e7c9485412041f5ced738777edbcc586e5ce326d6f265b136a50fe41e5db19fb [2024-10-12 00:46:59,881 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-12 00:46:59,902 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-12 00:46:59,904 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-12 00:46:59,905 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-12 00:46:59,906 INFO L274 PluginConnector]: CDTParser initialized [2024-10-12 00:46:59,906 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c [2024-10-12 00:47:01,108 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-12 00:47:01,362 INFO L384 CDTParser]: Found 1 translation units. [2024-10-12 00:47:01,362 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec13_product32.cil.c [2024-10-12 00:47:01,387 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data/189f64ed7/379cf369cd8d4163907a454abd822e05/FLAGe39f1865c [2024-10-12 00:47:01,668 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data/189f64ed7/379cf369cd8d4163907a454abd822e05 [2024-10-12 00:47:01,670 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-12 00:47:01,671 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-12 00:47:01,672 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-12 00:47:01,673 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-12 00:47:01,678 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-12 00:47:01,679 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.10 12:47:01" (1/1) ... [2024-10-12 00:47:01,680 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@58080a5d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:01, skipping insertion in model container [2024-10-12 00:47:01,680 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.10 12:47:01" (1/1) ... [2024-10-12 00:47:01,730 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-12 00:47:02,123 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-12 00:47:02,138 INFO L200 MainTranslator]: Completed pre-run [2024-10-12 00:47:02,147 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [48] [2024-10-12 00:47:02,148 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [57] [2024-10-12 00:47:02,148 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification13_spec.i","") [160] [2024-10-12 00:47:02,149 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [251] [2024-10-12 00:47:02,149 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [604] [2024-10-12 00:47:02,150 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [1271] [2024-10-12 00:47:02,150 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [1391] [2024-10-12 00:47:02,150 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [1426] [2024-10-12 00:47:02,150 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1792] [2024-10-12 00:47:02,150 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [3453] [2024-10-12 00:47:02,231 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-12 00:47:02,256 INFO L204 MainTranslator]: Completed translation [2024-10-12 00:47:02,257 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02 WrapperNode [2024-10-12 00:47:02,257 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-12 00:47:02,258 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-12 00:47:02,258 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-12 00:47:02,258 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-12 00:47:02,263 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:02,281 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:02,883 INFO L138 Inliner]: procedures = 97, calls = 355, calls flagged for inlining = 207, calls inlined = 2065, statements flattened = 69873 [2024-10-12 00:47:02,883 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-12 00:47:02,884 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-10-12 00:47:02,884 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-10-12 00:47:02,885 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-10-12 00:47:02,893 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:02,893 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:03,029 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:03,207 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-10-12 00:47:03,208 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:03,208 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:03,541 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:03,966 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:04,014 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:04,083 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:04,285 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-10-12 00:47:04,288 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-10-12 00:47:04,289 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-10-12 00:47:04,289 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-10-12 00:47:04,289 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (1/1) ... [2024-10-12 00:47:04,301 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:04,314 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:04,332 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:04,346 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-10-12 00:47:04,404 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-10-12 00:47:04,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-10-12 00:47:04,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-10-12 00:47:04,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-10-12 00:47:04,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-10-12 00:47:04,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-10-12 00:47:04,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-10-12 00:47:04,405 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-10-12 00:47:04,406 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-10-12 00:47:04,406 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-10-12 00:47:04,406 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-10-12 00:47:04,406 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-10-12 00:47:04,406 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-10-12 00:47:04,407 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-10-12 00:47:04,407 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-10-12 00:47:04,407 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-10-12 00:47:04,407 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-10-12 00:47:04,408 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-10-12 00:47:04,408 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-10-12 00:47:04,408 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-10-12 00:47:04,408 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-10-12 00:47:04,409 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-10-12 00:47:04,409 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-10-12 00:47:04,600 INFO L238 CfgBuilder]: Building ICFG [2024-10-12 00:47:04,602 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-10-12 00:47:23,475 INFO L? ?]: Removed 30382 outVars from TransFormulas that were not future-live. [2024-10-12 00:47:23,475 INFO L287 CfgBuilder]: Performing block encoding [2024-10-12 00:47:23,650 INFO L309 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-10-12 00:47:23,651 INFO L314 CfgBuilder]: Removed 61 assume(true) statements. [2024-10-12 00:47:23,651 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.10 12:47:23 BoogieIcfgContainer [2024-10-12 00:47:23,651 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-10-12 00:47:23,652 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-10-12 00:47:23,653 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-10-12 00:47:23,656 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-10-12 00:47:23,657 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-12 00:47:23,657 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 12.10 12:47:01" (1/3) ... [2024-10-12 00:47:23,658 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5bb3e9be and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 12.10 12:47:23, skipping insertion in model container [2024-10-12 00:47:23,658 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-12 00:47:23,659 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.10 12:47:02" (2/3) ... [2024-10-12 00:47:23,660 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5bb3e9be and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 12.10 12:47:23, skipping insertion in model container [2024-10-12 00:47:23,660 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-12 00:47:23,660 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.10 12:47:23" (3/3) ... [2024-10-12 00:47:23,661 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product32.cil.c [2024-10-12 00:47:23,910 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-10-12 00:47:23,910 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-10-12 00:47:23,910 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-10-12 00:47:23,911 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-10-12 00:47:23,911 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-10-12 00:47:23,911 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-10-12 00:47:23,911 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-10-12 00:47:23,911 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-10-12 00:47:23,956 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 18492 states, 18491 states have (on average 1.8741549943215619) internal successors, (34655), 18491 states have internal predecessors, (34655), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:24,221 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4184 [2024-10-12 00:47:24,221 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:24,221 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:24,228 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:24,229 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:24,229 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-10-12 00:47:24,264 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 18492 states, 18491 states have (on average 1.8741549943215619) internal successors, (34655), 18491 states have internal predecessors, (34655), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:24,435 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4184 [2024-10-12 00:47:24,435 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:24,435 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:24,437 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:24,437 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:24,442 INFO L745 eck$LassoCheckResult]: Stem: 4896#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 4611#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 17129#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 16827#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 9996#valid_product_returnLabel#1true main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 3998#L591true assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 10852#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 6768#L1317true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 2574#getOrigin_returnLabel#1true aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 13503#L964true assume 0 == initPersonOnFloor_~floor#1; 17894#L965true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 390#L1072-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 13212#L756true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 11224#L768-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 10324#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 16771#aliceCall_returnLabel#1true havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 14637#L1317-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 9702#getOrigin_returnLabel#2true angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 817#L964-1true assume 0 == initPersonOnFloor_~floor#1; 6155#L965-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5687#L1072-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 10102#L756-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6970#L768-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 3389#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 7683#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 7100#getCurrentHeading_returnLabel#1true __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 12920#__utac_acc__Specification13_spec__1_returnLabel#1true havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 14708#areDoorsOpen_returnLabel#1true timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 978#L3060true assume 0 != timeShift_~tmp~29#1; 9983#L3061true assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 9254#L3060-1true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 17953#L188true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 7645#L189true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2919#L3280true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~3#1 := 0;existInLiftCallsInDirection_~i~3#1 := 1 + ~currentFloorID~0; 15186#L3284-2true [2024-10-12 00:47:24,443 INFO L747 eck$LassoCheckResult]: Loop: 15186#L3284-2true assume !false; 3452#L3285true assume existInLiftCallsInDirection_~i~3#1 < 5; 5594#L3286true assume !(0 == existInLiftCallsInDirection_~i~3#1); 12435#$Ultimate##7260true assume !(1 == existInLiftCallsInDirection_~i~3#1); 10042#$Ultimate##7264true assume !(2 == existInLiftCallsInDirection_~i~3#1); 4094#$Ultimate##7268true assume !(3 == existInLiftCallsInDirection_~i~3#1); 11120#$Ultimate##7272true assume !(4 == existInLiftCallsInDirection_~i~3#1); 3560#L3327-1true existInLiftCallsInDirection_~i~3#1 := 1 + existInLiftCallsInDirection_~i~3#1; 15186#L3284-2true [2024-10-12 00:47:24,448 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:24,449 INFO L85 PathProgramCache]: Analyzing trace with hash -1516016117, now seen corresponding path program 1 times [2024-10-12 00:47:24,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:24,460 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1332904909] [2024-10-12 00:47:24,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:24,461 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:24,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:24,868 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:24,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:24,870 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1332904909] [2024-10-12 00:47:24,870 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1332904909] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:24,870 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:24,871 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-12 00:47:24,872 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [696712326] [2024-10-12 00:47:24,873 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:24,876 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:24,879 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:24,879 INFO L85 PathProgramCache]: Analyzing trace with hash 1774605181, now seen corresponding path program 1 times [2024-10-12 00:47:24,879 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:24,879 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1687803567] [2024-10-12 00:47:24,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:24,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:24,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:24,905 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:24,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:24,943 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:24,998 INFO L204 LassoAnalysis]: Preferences: [2024-10-12 00:47:24,999 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-10-12 00:47:24,999 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-10-12 00:47:24,999 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-10-12 00:47:24,999 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2024-10-12 00:47:24,999 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:25,000 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-10-12 00:47:25,000 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-10-12 00:47:25,000 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration1_Loop [2024-10-12 00:47:25,000 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-10-12 00:47:25,000 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-10-12 00:47:25,015 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-10-12 00:47:25,067 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-10-12 00:47:25,067 INFO L365 LassoAnalysis]: Checking for nontermination... [2024-10-12 00:47:25,069 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:25,069 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:25,071 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:25,071 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2024-10-12 00:47:25,074 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-10-12 00:47:25,074 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-10-12 00:47:25,097 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2024-10-12 00:47:25,097 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:25,098 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:25,100 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:25,101 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2024-10-12 00:47:25,102 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2024-10-12 00:47:25,102 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-10-12 00:47:25,129 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2024-10-12 00:47:25,133 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2024-10-12 00:47:25,133 INFO L204 LassoAnalysis]: Preferences: [2024-10-12 00:47:25,133 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-10-12 00:47:25,133 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-10-12 00:47:25,133 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-10-12 00:47:25,134 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2024-10-12 00:47:25,134 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:25,134 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-10-12 00:47:25,134 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-10-12 00:47:25,134 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration1_Loop [2024-10-12 00:47:25,134 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-10-12 00:47:25,134 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-10-12 00:47:25,135 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-10-12 00:47:25,181 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-10-12 00:47:25,185 INFO L451 LassoAnalysis]: Using template 'affine'. [2024-10-12 00:47:25,186 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:25,186 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:25,187 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:25,189 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2024-10-12 00:47:25,190 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-10-12 00:47:25,199 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-10-12 00:47:25,200 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-10-12 00:47:25,200 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-10-12 00:47:25,200 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-10-12 00:47:25,200 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-10-12 00:47:25,202 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-10-12 00:47:25,202 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-10-12 00:47:25,205 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2024-10-12 00:47:25,208 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2024-10-12 00:47:25,209 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2024-10-12 00:47:25,210 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:25,210 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:25,231 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:25,232 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2024-10-12 00:47:25,236 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2024-10-12 00:47:25,236 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2024-10-12 00:47:25,237 INFO L474 LassoAnalysis]: Proved termination. [2024-10-12 00:47:25,237 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~3#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~3#1 Supporting invariants [] [2024-10-12 00:47:25,247 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2024-10-12 00:47:25,250 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2024-10-12 00:47:25,274 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:25,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:25,403 INFO L255 TraceCheckSpWp]: Trace formula consists of 541 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-10-12 00:47:25,405 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-12 00:47:25,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:25,469 WARN L253 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-10-12 00:47:25,469 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-12 00:47:25,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:25,643 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2024-10-12 00:47:25,676 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 18492 states, 18491 states have (on average 1.8741549943215619) internal successors, (34655), 18491 states have internal predecessors, (34655), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:26,448 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2024-10-12 00:47:27,238 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 18492 states, 18491 states have (on average 1.8741549943215619) internal successors, (34655), 18491 states have internal predecessors, (34655), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 48202 states and 90276 transitions. Complement of second has 18 states. [2024-10-12 00:47:27,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2024-10-12 00:47:27,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:27,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 62485 transitions. [2024-10-12 00:47:27,295 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 62485 transitions. Stem has 34 letters. Loop has 8 letters. [2024-10-12 00:47:27,296 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-10-12 00:47:27,297 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 62485 transitions. Stem has 42 letters. Loop has 8 letters. [2024-10-12 00:47:27,297 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-10-12 00:47:27,297 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 62485 transitions. Stem has 34 letters. Loop has 16 letters. [2024-10-12 00:47:27,298 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-10-12 00:47:27,299 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48202 states and 90276 transitions. [2024-10-12 00:47:27,524 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8286 [2024-10-12 00:47:27,676 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48202 states to 33271 states and 62229 transitions. [2024-10-12 00:47:27,677 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33241 [2024-10-12 00:47:27,707 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33242 [2024-10-12 00:47:27,708 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33271 states and 62229 transitions. [2024-10-12 00:47:27,711 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:27,711 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33271 states and 62229 transitions. [2024-10-12 00:47:27,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33271 states and 62229 transitions. [2024-10-12 00:47:28,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33271 to 33245. [2024-10-12 00:47:28,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33245 states, 33245 states have (on average 1.8706572416904799) internal successors, (62190), 33244 states have internal predecessors, (62190), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:28,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33245 states to 33245 states and 62190 transitions. [2024-10-12 00:47:28,517 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33245 states and 62190 transitions. [2024-10-12 00:47:28,517 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:28,520 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-12 00:47:28,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-12 00:47:28,521 INFO L87 Difference]: Start difference. First operand 33245 states and 62190 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:29,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:29,307 INFO L93 Difference]: Finished difference Result 33227 states and 62059 transitions. [2024-10-12 00:47:29,307 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33227 states and 62059 transitions. [2024-10-12 00:47:29,535 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8270 [2024-10-12 00:47:29,649 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33227 states to 33218 states and 62050 transitions. [2024-10-12 00:47:29,649 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33199 [2024-10-12 00:47:29,680 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33199 [2024-10-12 00:47:29,681 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33218 states and 62050 transitions. [2024-10-12 00:47:29,684 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:29,684 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33218 states and 62050 transitions. [2024-10-12 00:47:29,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33218 states and 62050 transitions. [2024-10-12 00:47:29,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33218 to 18479. [2024-10-12 00:47:29,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18479 states, 18479 states have (on average 1.8680123383299962) internal successors, (34519), 18478 states have internal predecessors, (34519), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:29,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18479 states to 18479 states and 34519 transitions. [2024-10-12 00:47:29,996 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18479 states and 34519 transitions. [2024-10-12 00:47:29,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-12 00:47:29,997 INFO L425 stractBuchiCegarLoop]: Abstraction has 18479 states and 34519 transitions. [2024-10-12 00:47:29,997 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-10-12 00:47:29,998 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18479 states and 34519 transitions. [2024-10-12 00:47:30,136 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:30,136 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:30,137 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:30,137 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:30,137 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:30,138 INFO L745 eck$LassoCheckResult]: Stem: 142833#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 142398#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 142399#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 151692#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 148389#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 141423#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 141424#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 145275#L1317 assume !(0 == getOrigin_~person#1); 144711#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 139006#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 139007#L964 assume 0 == initPersonOnFloor_~floor#1; 150706#L965 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 134376#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 134377#L756 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 134694#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 148658#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 148659#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 151176#L1317-1 assume !(0 == getOrigin_~person#1); 145096#L1321-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 143557#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 135419#L964-1 assume 0 == initPersonOnFloor_~floor#1; 135420#L965-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 133347#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 143905#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 140543#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 140421#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 140422#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 145650#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 145651#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 150399#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 135792#L3060 assume 0 != timeShift_~tmp~29#1; 135794#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 147777#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 147778#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 146235#L189 assume !(1 == ~prevDir~0); 146236#L215 assume 0 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 1;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 137153#L3280-2 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~3#1 := 0;existInLiftCallsInDirection_~i~3#1 := 1 + ~currentFloorID~0; 137154#L3284-8 [2024-10-12 00:47:30,138 INFO L747 eck$LassoCheckResult]: Loop: 137154#L3284-8 assume !false; 145316#L3285-2 assume existInLiftCallsInDirection_~i~3#1 < 5; 145317#L3286-2 assume !(0 == existInLiftCallsInDirection_~i~3#1); 146582#$Ultimate##7416 assume !(1 == existInLiftCallsInDirection_~i~3#1); 135058#$Ultimate##7420 assume !(2 == existInLiftCallsInDirection_~i~3#1); 135122#$Ultimate##7424 assume !(3 == existInLiftCallsInDirection_~i~3#1); 139693#$Ultimate##7428 assume !(4 == existInLiftCallsInDirection_~i~3#1); 150737#L3327-5 existInLiftCallsInDirection_~i~3#1 := 1 + existInLiftCallsInDirection_~i~3#1; 137154#L3284-8 [2024-10-12 00:47:30,139 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:30,139 INFO L85 PathProgramCache]: Analyzing trace with hash -1974371470, now seen corresponding path program 1 times [2024-10-12 00:47:30,139 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:30,139 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [545712819] [2024-10-12 00:47:30,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:30,139 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:30,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:30,281 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:30,282 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:30,282 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [545712819] [2024-10-12 00:47:30,282 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [545712819] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:30,282 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:30,282 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-12 00:47:30,282 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [299497950] [2024-10-12 00:47:30,282 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:30,283 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:30,283 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:30,283 INFO L85 PathProgramCache]: Analyzing trace with hash 581704573, now seen corresponding path program 1 times [2024-10-12 00:47:30,283 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:30,283 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [37396583] [2024-10-12 00:47:30,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:30,283 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:30,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:30,297 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:30,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:30,310 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:30,344 INFO L204 LassoAnalysis]: Preferences: [2024-10-12 00:47:30,344 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-10-12 00:47:30,344 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-10-12 00:47:30,344 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-10-12 00:47:30,344 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2024-10-12 00:47:30,344 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:30,344 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-10-12 00:47:30,344 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-10-12 00:47:30,344 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration2_Loop [2024-10-12 00:47:30,345 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-10-12 00:47:30,345 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-10-12 00:47:30,345 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-10-12 00:47:30,392 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-10-12 00:47:30,392 INFO L365 LassoAnalysis]: Checking for nontermination... [2024-10-12 00:47:30,392 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:30,392 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:30,394 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:30,395 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2024-10-12 00:47:30,396 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-10-12 00:47:30,396 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-10-12 00:47:30,417 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2024-10-12 00:47:30,419 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:30,419 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:30,421 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:30,422 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2024-10-12 00:47:30,424 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2024-10-12 00:47:30,424 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-10-12 00:47:30,450 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2024-10-12 00:47:30,454 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Ended with exit code 0 [2024-10-12 00:47:30,455 INFO L204 LassoAnalysis]: Preferences: [2024-10-12 00:47:30,455 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-10-12 00:47:30,455 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-10-12 00:47:30,455 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-10-12 00:47:30,455 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2024-10-12 00:47:30,455 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:30,455 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-10-12 00:47:30,455 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-10-12 00:47:30,455 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration2_Loop [2024-10-12 00:47:30,455 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-10-12 00:47:30,455 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-10-12 00:47:30,456 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-10-12 00:47:30,496 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-10-12 00:47:30,496 INFO L451 LassoAnalysis]: Using template 'affine'. [2024-10-12 00:47:30,496 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:30,497 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:30,498 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:30,499 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2024-10-12 00:47:30,501 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-10-12 00:47:30,510 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-10-12 00:47:30,510 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-10-12 00:47:30,510 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-10-12 00:47:30,510 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-10-12 00:47:30,510 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-10-12 00:47:30,511 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-10-12 00:47:30,511 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-10-12 00:47:30,513 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2024-10-12 00:47:30,515 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2024-10-12 00:47:30,515 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2024-10-12 00:47:30,515 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:30,515 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:30,516 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:30,518 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2024-10-12 00:47:30,518 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2024-10-12 00:47:30,518 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2024-10-12 00:47:30,518 INFO L474 LassoAnalysis]: Proved termination. [2024-10-12 00:47:30,518 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~3#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~3#1 Supporting invariants [] [2024-10-12 00:47:30,528 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2024-10-12 00:47:30,529 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2024-10-12 00:47:30,538 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:30,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:30,605 INFO L255 TraceCheckSpWp]: Trace formula consists of 544 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-10-12 00:47:30,606 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-12 00:47:30,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:30,650 WARN L253 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-10-12 00:47:30,651 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-12 00:47:30,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:30,763 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2024-10-12 00:47:30,763 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 18479 states and 34519 transitions. cyclomatic complexity: 16074 Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:31,167 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2024-10-12 00:47:31,581 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 18479 states and 34519 transitions. cyclomatic complexity: 16074. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 33274 states and 62133 transitions. Complement of second has 17 states. [2024-10-12 00:47:31,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2024-10-12 00:47:31,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 9 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:31,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 34506 transitions. [2024-10-12 00:47:31,608 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 34506 transitions. Stem has 37 letters. Loop has 8 letters. [2024-10-12 00:47:31,609 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-10-12 00:47:31,609 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 34506 transitions. Stem has 45 letters. Loop has 8 letters. [2024-10-12 00:47:31,610 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-10-12 00:47:31,610 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 34506 transitions. Stem has 37 letters. Loop has 16 letters. [2024-10-12 00:47:31,610 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-10-12 00:47:31,611 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33274 states and 62133 transitions. [2024-10-12 00:47:31,724 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8284 [2024-10-12 00:47:31,826 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33274 states to 33268 states and 62127 transitions. [2024-10-12 00:47:31,827 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33219 [2024-10-12 00:47:31,872 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33220 [2024-10-12 00:47:31,872 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33268 states and 62127 transitions. [2024-10-12 00:47:31,872 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:31,872 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33268 states and 62127 transitions. [2024-10-12 00:47:31,906 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33268 states and 62127 transitions. [2024-10-12 00:47:32,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33268 to 18503. [2024-10-12 00:47:32,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18503 states, 18503 states have (on average 1.8676430849051504) internal successors, (34557), 18502 states have internal predecessors, (34557), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:32,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18503 states to 18503 states and 34557 transitions. [2024-10-12 00:47:32,174 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18503 states and 34557 transitions. [2024-10-12 00:47:32,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:32,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-12 00:47:32,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-12 00:47:32,175 INFO L87 Difference]: Start difference. First operand 18503 states and 34557 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:32,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:32,736 INFO L93 Difference]: Finished difference Result 18521 states and 34575 transitions. [2024-10-12 00:47:32,736 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18521 states and 34575 transitions. [2024-10-12 00:47:32,819 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4186 [2024-10-12 00:47:32,881 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18521 states to 18521 states and 34575 transitions. [2024-10-12 00:47:32,882 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18483 [2024-10-12 00:47:32,896 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18483 [2024-10-12 00:47:32,896 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18521 states and 34575 transitions. [2024-10-12 00:47:32,897 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:32,897 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18521 states and 34575 transitions. [2024-10-12 00:47:32,926 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18521 states and 34575 transitions. [2024-10-12 00:47:33,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18521 to 18518. [2024-10-12 00:47:33,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18518 states, 18518 states have (on average 1.8669402743276813) internal successors, (34572), 18517 states have internal predecessors, (34572), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:33,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18518 states to 18518 states and 34572 transitions. [2024-10-12 00:47:33,275 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18518 states and 34572 transitions. [2024-10-12 00:47:33,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-12 00:47:33,277 INFO L425 stractBuchiCegarLoop]: Abstraction has 18518 states and 34572 transitions. [2024-10-12 00:47:33,277 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-10-12 00:47:33,277 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18518 states and 34572 transitions. [2024-10-12 00:47:33,321 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4186 [2024-10-12 00:47:33,321 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:33,321 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:33,322 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:33,322 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:33,323 INFO L745 eck$LassoCheckResult]: Stem: 231792#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 231358#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 231359#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 240661#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 237355#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 230382#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 230383#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 234235#L1317 assume !(0 == getOrigin_~person#1); 233672#L1321 assume !(1 == getOrigin_~person#1); 233673#L1325 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 231230#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 240791#L964 assume 0 == initPersonOnFloor_~floor#1; 240772#L965 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 223330#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 223331#L756 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 223648#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 237623#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 237624#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 240142#L1317-1 assume !(0 == getOrigin_~person#1); 234057#L1321-1 assume !(1 == getOrigin_~person#1); 232517#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 232518#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 240800#L964-1 assume 0 == initPersonOnFloor_~floor#1; 233482#L965-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 222302#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 232864#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 229502#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 229379#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 229380#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 234614#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 234615#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 239365#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 224750#L3060 assume 0 != timeShift_~tmp~29#1; 224752#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 236743#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 236744#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 235197#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 228565#L3280 assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~3#1 := 0;existInLiftCallsInDirection_~i~3#1 := 1 + ~currentFloorID~0; 228566#L3284-2 assume !false; 229487#L3285 [2024-10-12 00:47:33,326 INFO L747 eck$LassoCheckResult]: Loop: 229487#L3285 assume existInLiftCallsInDirection_~i~3#1 < 5; 229489#L3286 assume !(0 == existInLiftCallsInDirection_~i~3#1); 232743#$Ultimate##7260 assume 1 == existInLiftCallsInDirection_~i~3#1; 233334#L3301 assume !(0 != ~floorButtons_1~0); 233335#$Ultimate##7264 assume !(2 == existInLiftCallsInDirection_~i~3#1); 230986#$Ultimate##7268 assume !(3 == existInLiftCallsInDirection_~i~3#1); 232607#$Ultimate##7272 assume !(4 == existInLiftCallsInDirection_~i~3#1); 229684#L3327-1 existInLiftCallsInDirection_~i~3#1 := 1 + existInLiftCallsInDirection_~i~3#1; 229685#L3284-2 assume !false; 229487#L3285 [2024-10-12 00:47:33,326 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:33,326 INFO L85 PathProgramCache]: Analyzing trace with hash 1800201023, now seen corresponding path program 1 times [2024-10-12 00:47:33,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:33,327 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [268254879] [2024-10-12 00:47:33,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:33,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:33,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:33,382 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:33,382 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:33,382 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [268254879] [2024-10-12 00:47:33,383 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [268254879] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:33,383 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:33,383 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-12 00:47:33,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1628301545] [2024-10-12 00:47:33,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:33,384 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:33,385 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:33,385 INFO L85 PathProgramCache]: Analyzing trace with hash 917806602, now seen corresponding path program 1 times [2024-10-12 00:47:33,385 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:33,385 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2005052016] [2024-10-12 00:47:33,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:33,386 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:33,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:33,400 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:33,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:33,415 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:33,439 INFO L204 LassoAnalysis]: Preferences: [2024-10-12 00:47:33,439 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-10-12 00:47:33,439 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-10-12 00:47:33,439 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-10-12 00:47:33,440 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2024-10-12 00:47:33,440 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:33,440 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-10-12 00:47:33,440 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-10-12 00:47:33,440 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration3_Loop [2024-10-12 00:47:33,440 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-10-12 00:47:33,440 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-10-12 00:47:33,441 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-10-12 00:47:33,445 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-10-12 00:47:33,465 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-10-12 00:47:33,465 INFO L365 LassoAnalysis]: Checking for nontermination... [2024-10-12 00:47:33,465 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:33,465 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:33,467 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:33,468 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2024-10-12 00:47:33,469 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-10-12 00:47:33,469 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-10-12 00:47:33,490 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2024-10-12 00:47:33,491 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:33,491 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:33,492 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:33,494 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2024-10-12 00:47:33,495 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2024-10-12 00:47:33,496 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-10-12 00:47:33,507 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2024-10-12 00:47:33,517 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2024-10-12 00:47:33,518 INFO L204 LassoAnalysis]: Preferences: [2024-10-12 00:47:33,518 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-10-12 00:47:33,518 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-10-12 00:47:33,518 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-10-12 00:47:33,518 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2024-10-12 00:47:33,518 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:33,518 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-10-12 00:47:33,518 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-10-12 00:47:33,518 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product32.cil.c_Iteration3_Loop [2024-10-12 00:47:33,518 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-10-12 00:47:33,518 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-10-12 00:47:33,518 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-10-12 00:47:33,527 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-10-12 00:47:33,547 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-10-12 00:47:33,547 INFO L451 LassoAnalysis]: Using template 'affine'. [2024-10-12 00:47:33,548 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:33,548 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:33,549 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:33,551 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2024-10-12 00:47:33,553 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-10-12 00:47:33,562 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-10-12 00:47:33,562 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-10-12 00:47:33,562 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-10-12 00:47:33,562 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-10-12 00:47:33,562 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-10-12 00:47:33,563 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-10-12 00:47:33,563 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-10-12 00:47:33,565 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2024-10-12 00:47:33,566 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2024-10-12 00:47:33,566 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2024-10-12 00:47:33,567 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-12 00:47:33,567 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-12 00:47:33,568 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-12 00:47:33,569 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2024-10-12 00:47:33,570 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2024-10-12 00:47:33,570 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2024-10-12 00:47:33,570 INFO L474 LassoAnalysis]: Proved termination. [2024-10-12 00:47:33,570 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~3#1) = -2*ULTIMATE.start_existInLiftCallsInDirection_~i~3#1 + 3 Supporting invariants [] [2024-10-12 00:47:33,581 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2024-10-12 00:47:33,582 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2024-10-12 00:47:33,592 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:33,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:33,659 INFO L255 TraceCheckSpWp]: Trace formula consists of 546 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-10-12 00:47:33,660 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-12 00:47:33,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:33,707 INFO L255 TraceCheckSpWp]: Trace formula consists of 14 conjuncts, 4 conjuncts are in the unsatisfiable core [2024-10-12 00:47:33,707 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-12 00:47:33,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:33,762 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2024-10-12 00:47:33,762 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 18518 states and 34572 transitions. cyclomatic complexity: 16089 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:34,033 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2024-10-12 00:47:34,615 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 18518 states and 34572 transitions. cyclomatic complexity: 16089. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 48103 states and 89794 transitions. Complement of second has 8 states. [2024-10-12 00:47:34,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 2 non-accepting loop states 1 accepting loop states [2024-10-12 00:47:34,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:34,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 62047 transitions. [2024-10-12 00:47:34,655 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 62047 transitions. Stem has 39 letters. Loop has 9 letters. [2024-10-12 00:47:34,656 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-10-12 00:47:34,656 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 62047 transitions. Stem has 48 letters. Loop has 9 letters. [2024-10-12 00:47:34,656 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-10-12 00:47:34,656 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 62047 transitions. Stem has 39 letters. Loop has 18 letters. [2024-10-12 00:47:34,657 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-10-12 00:47:34,657 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48103 states and 89794 transitions. [2024-10-12 00:47:34,949 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 8270 [2024-10-12 00:47:35,035 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48103 states to 33309 states and 62171 transitions. [2024-10-12 00:47:35,036 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33227 [2024-10-12 00:47:35,058 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33230 [2024-10-12 00:47:35,058 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33309 states and 62171 transitions. [2024-10-12 00:47:35,082 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:35,082 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33309 states and 62171 transitions. [2024-10-12 00:47:35,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33309 states and 62171 transitions. [2024-10-12 00:47:35,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33309 to 18560. [2024-10-12 00:47:35,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18560 states, 18560 states have (on average 1.8657327586206895) internal successors, (34628), 18559 states have internal predecessors, (34628), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:35,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18560 states to 18560 states and 34628 transitions. [2024-10-12 00:47:35,401 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18560 states and 34628 transitions. [2024-10-12 00:47:35,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:35,402 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-12 00:47:35,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-12 00:47:35,402 INFO L87 Difference]: Start difference. First operand 18560 states and 34628 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:35,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:35,757 INFO L93 Difference]: Finished difference Result 18526 states and 34560 transitions. [2024-10-12 00:47:35,757 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18526 states and 34560 transitions. [2024-10-12 00:47:35,807 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:35,849 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18526 states to 18526 states and 34560 transitions. [2024-10-12 00:47:35,849 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18447 [2024-10-12 00:47:35,860 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18447 [2024-10-12 00:47:35,860 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18526 states and 34560 transitions. [2024-10-12 00:47:35,860 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:35,860 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18526 states and 34560 transitions. [2024-10-12 00:47:35,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18526 states and 34560 transitions. [2024-10-12 00:47:36,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18526 to 18526. [2024-10-12 00:47:36,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18526 states, 18526 states have (on average 1.865486343517219) internal successors, (34560), 18525 states have internal predecessors, (34560), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:36,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18526 states to 18526 states and 34560 transitions. [2024-10-12 00:47:36,068 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18526 states and 34560 transitions. [2024-10-12 00:47:36,068 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-12 00:47:36,068 INFO L425 stractBuchiCegarLoop]: Abstraction has 18526 states and 34560 transitions. [2024-10-12 00:47:36,069 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-10-12 00:47:36,069 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18526 states and 34560 transitions. [2024-10-12 00:47:36,111 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:36,111 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:36,111 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:36,112 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:36,112 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:36,112 INFO L745 eck$LassoCheckResult]: Stem: 335656#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 335222#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 335223#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 344515#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 341214#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 334252#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 334253#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 338095#L1317 assume !(0 == getOrigin_~person#1); 337534#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 331835#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 331836#L964 assume !(0 == initPersonOnFloor_~floor#1); 343525#L991 assume !(1 == initPersonOnFloor_~floor#1); 335551#L1018 assume !(2 == initPersonOnFloor_~floor#1); 330073#L1045 assume 3 == initPersonOnFloor_~floor#1; 330074#L1046 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 327205#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 327206#L756 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 327523#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 341482#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 341483#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 343995#L1317-1 assume !(0 == getOrigin_~person#1); 337918#L1321-1 assume !(1 == getOrigin_~person#1); 336378#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 336379#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 344651#L964-1 assume 0 == initPersonOnFloor_~floor#1; 337345#L965-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 326177#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 336728#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 333372#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 333250#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 333251#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 338473#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 338474#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 343218#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 328625#L3060 assume 0 != timeShift_~tmp~29#1; 328627#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 340602#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 340603#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 339056#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 332438#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 332440#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 336408#L3350-2 [2024-10-12 00:47:36,112 INFO L747 eck$LassoCheckResult]: Loop: 336408#L3350-2 assume !false; 344552#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 342750#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 342751#L3359-2 assume !false; 329716#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 329717#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 336408#L3350-2 [2024-10-12 00:47:36,113 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:36,113 INFO L85 PathProgramCache]: Analyzing trace with hash 790460044, now seen corresponding path program 1 times [2024-10-12 00:47:36,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:36,113 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1938063848] [2024-10-12 00:47:36,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:36,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:36,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:36,180 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:36,180 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:36,180 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1938063848] [2024-10-12 00:47:36,181 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1938063848] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:36,181 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:36,181 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-12 00:47:36,181 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [939191588] [2024-10-12 00:47:36,181 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:36,181 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:36,181 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:36,182 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 1 times [2024-10-12 00:47:36,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:36,182 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906493235] [2024-10-12 00:47:36,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:36,182 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:36,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:36,196 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:36,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:36,205 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:36,220 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:36,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-12 00:47:36,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-12 00:47:36,221 INFO L87 Difference]: Start difference. First operand 18526 states and 34560 transitions. cyclomatic complexity: 16071 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:36,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:36,807 INFO L93 Difference]: Finished difference Result 18534 states and 34567 transitions. [2024-10-12 00:47:36,807 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18534 states and 34567 transitions. [2024-10-12 00:47:36,865 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:36,908 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18534 states to 18534 states and 34567 transitions. [2024-10-12 00:47:36,909 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18455 [2024-10-12 00:47:36,920 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18455 [2024-10-12 00:47:36,920 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18534 states and 34567 transitions. [2024-10-12 00:47:36,929 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:36,929 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18534 states and 34567 transitions. [2024-10-12 00:47:36,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18534 states and 34567 transitions. [2024-10-12 00:47:37,211 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18534 to 18526. [2024-10-12 00:47:37,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18526 states, 18526 states have (on average 1.8651624743603583) internal successors, (34554), 18525 states have internal predecessors, (34554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:37,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18526 states to 18526 states and 34554 transitions. [2024-10-12 00:47:37,259 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18526 states and 34554 transitions. [2024-10-12 00:47:37,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-12 00:47:37,260 INFO L425 stractBuchiCegarLoop]: Abstraction has 18526 states and 34554 transitions. [2024-10-12 00:47:37,260 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-10-12 00:47:37,260 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18526 states and 34554 transitions. [2024-10-12 00:47:37,296 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:37,296 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:37,296 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:37,297 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:37,297 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:37,297 INFO L745 eck$LassoCheckResult]: Stem: 372724#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 372290#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 372291#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 381580#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 378281#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 371319#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 371320#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 375164#L1317 assume !(0 == getOrigin_~person#1); 374601#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 368903#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 368904#L964 assume !(0 == initPersonOnFloor_~floor#1); 380592#L991 assume !(1 == initPersonOnFloor_~floor#1); 372619#L1018 assume !(2 == initPersonOnFloor_~floor#1); 367141#L1045 assume 3 == initPersonOnFloor_~floor#1; 367142#L1046 assume !(0 == initPersonOnFloor_~person#1); 380860#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 364273#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 364274#L756 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 364591#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 378550#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 378551#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 381060#L1317-1 assume !(0 == getOrigin_~person#1); 374985#L1321-1 assume !(1 == getOrigin_~person#1); 373446#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 373447#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 381716#L964-1 assume 0 == initPersonOnFloor_~floor#1; 374412#L965-2 assume !(0 == initPersonOnFloor_~person#1); 374413#L968-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 363245#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 373796#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 370439#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 370318#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 370319#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 375540#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 375541#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 380285#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 365693#L3060 assume 0 != timeShift_~tmp~29#1; 365695#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 377669#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 377670#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 376125#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 369506#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 369508#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 373476#L3350-2 [2024-10-12 00:47:37,298 INFO L747 eck$LassoCheckResult]: Loop: 373476#L3350-2 assume !false; 381617#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 379818#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 379819#L3359-2 assume !false; 366784#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 366785#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 373476#L3350-2 [2024-10-12 00:47:37,298 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:37,298 INFO L85 PathProgramCache]: Analyzing trace with hash 1011904592, now seen corresponding path program 1 times [2024-10-12 00:47:37,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:37,298 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [860369078] [2024-10-12 00:47:37,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:37,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:37,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:37,355 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:37,355 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:37,356 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [860369078] [2024-10-12 00:47:37,356 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [860369078] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:37,356 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:37,356 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-12 00:47:37,356 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1435900496] [2024-10-12 00:47:37,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:37,356 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:37,356 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:37,357 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 2 times [2024-10-12 00:47:37,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:37,357 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [115890198] [2024-10-12 00:47:37,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:37,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:37,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:37,367 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:37,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:37,376 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:37,391 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:37,391 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-12 00:47:37,391 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-12 00:47:37,391 INFO L87 Difference]: Start difference. First operand 18526 states and 34554 transitions. cyclomatic complexity: 16065 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:37,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:37,822 INFO L93 Difference]: Finished difference Result 18530 states and 34557 transitions. [2024-10-12 00:47:37,822 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18530 states and 34557 transitions. [2024-10-12 00:47:37,900 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:37,951 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18530 states to 18530 states and 34557 transitions. [2024-10-12 00:47:37,951 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18451 [2024-10-12 00:47:37,963 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18451 [2024-10-12 00:47:37,964 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18530 states and 34557 transitions. [2024-10-12 00:47:37,972 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:37,972 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18530 states and 34557 transitions. [2024-10-12 00:47:37,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18530 states and 34557 transitions. [2024-10-12 00:47:38,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18530 to 18530. [2024-10-12 00:47:38,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18530 states, 18530 states have (on average 1.8649217485159202) internal successors, (34557), 18529 states have internal predecessors, (34557), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:38,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18530 states to 18530 states and 34557 transitions. [2024-10-12 00:47:38,216 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18530 states and 34557 transitions. [2024-10-12 00:47:38,216 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-12 00:47:38,217 INFO L425 stractBuchiCegarLoop]: Abstraction has 18530 states and 34557 transitions. [2024-10-12 00:47:38,217 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-10-12 00:47:38,217 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18530 states and 34557 transitions. [2024-10-12 00:47:38,277 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:38,277 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:38,277 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:38,278 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:38,278 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:38,278 INFO L745 eck$LassoCheckResult]: Stem: 409788#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 409354#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 409355#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 418648#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 415343#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 408384#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 408385#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 412226#L1317 assume !(0 == getOrigin_~person#1); 411663#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 405965#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 405966#L964 assume !(0 == initPersonOnFloor_~floor#1); 417657#L991 assume !(1 == initPersonOnFloor_~floor#1); 409683#L1018 assume !(2 == initPersonOnFloor_~floor#1); 404204#L1045 assume 3 == initPersonOnFloor_~floor#1; 404205#L1046 assume !(0 == initPersonOnFloor_~person#1); 417926#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 401336#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 401337#L756 assume !(0 == callOnFloor_~floorID#1); 401653#L759 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 401654#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 415613#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 415614#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 418127#L1317-1 assume !(0 == getOrigin_~person#1); 412047#L1321-1 assume !(1 == getOrigin_~person#1); 410510#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 410511#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 418784#L964-1 assume 0 == initPersonOnFloor_~floor#1; 411474#L965-2 assume !(0 == initPersonOnFloor_~person#1); 411475#L968-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 417011#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 418786#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 407503#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 407381#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 407382#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 412604#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 412605#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 417350#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 402756#L3060 assume 0 != timeShift_~tmp~29#1; 402758#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 414731#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 414732#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 413187#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 406568#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 406570#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 410540#L3350-2 [2024-10-12 00:47:38,279 INFO L747 eck$LassoCheckResult]: Loop: 410540#L3350-2 assume !false; 418685#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 416882#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 416883#L3359-2 assume !false; 403847#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 403848#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 410540#L3350-2 [2024-10-12 00:47:38,279 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:38,279 INFO L85 PathProgramCache]: Analyzing trace with hash -793620309, now seen corresponding path program 1 times [2024-10-12 00:47:38,279 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:38,279 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [762387490] [2024-10-12 00:47:38,279 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:38,279 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:38,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:38,374 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:38,374 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:38,375 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [762387490] [2024-10-12 00:47:38,375 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [762387490] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:38,375 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:38,375 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-12 00:47:38,375 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1228547651] [2024-10-12 00:47:38,375 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:38,375 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:38,376 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:38,376 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 3 times [2024-10-12 00:47:38,376 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:38,376 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [544012376] [2024-10-12 00:47:38,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:38,376 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:38,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:38,392 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:38,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:38,405 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:38,423 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:38,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-12 00:47:38,423 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-12 00:47:38,424 INFO L87 Difference]: Start difference. First operand 18530 states and 34557 transitions. cyclomatic complexity: 16064 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:38,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:38,919 INFO L93 Difference]: Finished difference Result 18536 states and 34562 transitions. [2024-10-12 00:47:38,919 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18536 states and 34562 transitions. [2024-10-12 00:47:38,978 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:39,020 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18536 states to 18536 states and 34562 transitions. [2024-10-12 00:47:39,020 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18457 [2024-10-12 00:47:39,031 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18457 [2024-10-12 00:47:39,031 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18536 states and 34562 transitions. [2024-10-12 00:47:39,042 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:39,042 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18536 states and 34562 transitions. [2024-10-12 00:47:39,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18536 states and 34562 transitions. [2024-10-12 00:47:39,178 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18536 to 18536. [2024-10-12 00:47:39,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18536 states, 18536 states have (on average 1.8645878290893396) internal successors, (34562), 18535 states have internal predecessors, (34562), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:39,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18536 states to 18536 states and 34562 transitions. [2024-10-12 00:47:39,233 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18536 states and 34562 transitions. [2024-10-12 00:47:39,233 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-12 00:47:39,234 INFO L425 stractBuchiCegarLoop]: Abstraction has 18536 states and 34562 transitions. [2024-10-12 00:47:39,234 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-10-12 00:47:39,234 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18536 states and 34562 transitions. [2024-10-12 00:47:39,280 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:39,280 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:39,280 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:39,281 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:39,281 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:39,281 INFO L745 eck$LassoCheckResult]: Stem: 446863#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 446429#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 446430#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 455722#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 452420#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 445459#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 445460#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 449303#L1317 assume !(0 == getOrigin_~person#1); 448740#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 443040#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 443041#L964 assume !(0 == initPersonOnFloor_~floor#1); 454730#L991 assume !(1 == initPersonOnFloor_~floor#1); 446758#L1018 assume !(2 == initPersonOnFloor_~floor#1); 441278#L1045 assume 3 == initPersonOnFloor_~floor#1; 441279#L1046 assume !(0 == initPersonOnFloor_~person#1); 454999#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 438409#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 438410#L756 assume !(0 == callOnFloor_~floorID#1); 438726#L759 assume !(1 == callOnFloor_~floorID#1); 438727#L762 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 438886#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 452688#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 452689#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 455201#L1317-1 assume !(0 == getOrigin_~person#1); 449124#L1321-1 assume !(1 == getOrigin_~person#1); 447585#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 447586#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 455858#L964-1 assume 0 == initPersonOnFloor_~floor#1; 448551#L965-2 assume !(0 == initPersonOnFloor_~person#1); 448552#L968-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 454084#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 455863#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 444578#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 444456#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 444457#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 449681#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 449682#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 454423#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 439829#L3060 assume 0 != timeShift_~tmp~29#1; 439831#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 451808#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 451809#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 450264#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 443643#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 443645#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 447615#L3350-2 [2024-10-12 00:47:39,282 INFO L747 eck$LassoCheckResult]: Loop: 447615#L3350-2 assume !false; 455759#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 453955#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 453956#L3359-2 assume !false; 440921#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 440922#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 447615#L3350-2 [2024-10-12 00:47:39,283 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:39,283 INFO L85 PathProgramCache]: Analyzing trace with hash -775218357, now seen corresponding path program 1 times [2024-10-12 00:47:39,283 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:39,283 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [940917205] [2024-10-12 00:47:39,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:39,283 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:39,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:39,349 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:39,349 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:39,350 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [940917205] [2024-10-12 00:47:39,350 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [940917205] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:39,350 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:39,350 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-12 00:47:39,350 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2113895799] [2024-10-12 00:47:39,350 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:39,350 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:39,350 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:39,350 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 4 times [2024-10-12 00:47:39,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:39,351 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [150289693] [2024-10-12 00:47:39,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:39,351 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:39,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:39,365 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:39,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:39,375 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:39,394 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:39,394 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-12 00:47:39,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-12 00:47:39,395 INFO L87 Difference]: Start difference. First operand 18536 states and 34562 transitions. cyclomatic complexity: 16063 Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:39,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:39,830 INFO L93 Difference]: Finished difference Result 18544 states and 34569 transitions. [2024-10-12 00:47:39,830 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18544 states and 34569 transitions. [2024-10-12 00:47:39,887 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:39,929 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18544 states to 18544 states and 34569 transitions. [2024-10-12 00:47:39,929 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18465 [2024-10-12 00:47:39,940 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18465 [2024-10-12 00:47:39,940 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18544 states and 34569 transitions. [2024-10-12 00:47:39,956 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:39,956 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18544 states and 34569 transitions. [2024-10-12 00:47:39,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18544 states and 34569 transitions. [2024-10-12 00:47:40,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18544 to 18544. [2024-10-12 00:47:40,127 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18544 states, 18544 states have (on average 1.8641609145815359) internal successors, (34569), 18543 states have internal predecessors, (34569), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:40,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18544 states to 18544 states and 34569 transitions. [2024-10-12 00:47:40,159 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18544 states and 34569 transitions. [2024-10-12 00:47:40,159 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-12 00:47:40,160 INFO L425 stractBuchiCegarLoop]: Abstraction has 18544 states and 34569 transitions. [2024-10-12 00:47:40,160 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-10-12 00:47:40,160 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18544 states and 34569 transitions. [2024-10-12 00:47:40,207 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:40,207 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:40,207 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:40,208 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:40,208 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:40,208 INFO L745 eck$LassoCheckResult]: Stem: 483952#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 483518#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 483519#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 492812#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 489509#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 482548#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 482549#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 486392#L1317 assume !(0 == getOrigin_~person#1); 485829#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 480129#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 480130#L964 assume !(0 == initPersonOnFloor_~floor#1); 491819#L991 assume !(1 == initPersonOnFloor_~floor#1); 483847#L1018 assume !(2 == initPersonOnFloor_~floor#1); 478366#L1045 assume 3 == initPersonOnFloor_~floor#1; 478367#L1046 assume !(0 == initPersonOnFloor_~person#1); 492089#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 475496#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 475497#L756 assume !(0 == callOnFloor_~floorID#1); 475813#L759 assume !(1 == callOnFloor_~floorID#1); 475814#L762 assume !(2 == callOnFloor_~floorID#1); 475972#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 475973#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 489777#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 489778#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 492291#L1317-1 assume !(0 == getOrigin_~person#1); 486213#L1321-1 assume !(1 == getOrigin_~person#1); 484674#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 484675#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 492948#L964-1 assume 0 == initPersonOnFloor_~floor#1; 485640#L965-2 assume !(0 == initPersonOnFloor_~person#1); 485641#L968-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 491173#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 492957#L756-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 481667#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 481545#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 481546#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 486770#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 486771#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 491513#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 476916#L3060 assume 0 != timeShift_~tmp~29#1; 476918#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 488897#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 488898#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 487353#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 480732#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 480734#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 484704#L3350-2 [2024-10-12 00:47:40,208 INFO L747 eck$LassoCheckResult]: Loop: 484704#L3350-2 assume !false; 492849#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 491044#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 491045#L3359-2 assume !false; 478008#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 478009#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 484704#L3350-2 [2024-10-12 00:47:40,209 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:40,209 INFO L85 PathProgramCache]: Analyzing trace with hash -49658810, now seen corresponding path program 1 times [2024-10-12 00:47:40,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:40,209 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [121356833] [2024-10-12 00:47:40,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:40,209 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:40,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:40,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:40,317 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:40,317 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [121356833] [2024-10-12 00:47:40,317 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [121356833] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:40,317 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:40,317 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-12 00:47:40,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [610570844] [2024-10-12 00:47:40,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:40,317 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:40,317 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:40,318 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 5 times [2024-10-12 00:47:40,318 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:40,318 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [813662657] [2024-10-12 00:47:40,318 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:40,318 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:40,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:40,329 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:40,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:40,337 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:40,352 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:40,352 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-12 00:47:40,352 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-12 00:47:40,353 INFO L87 Difference]: Start difference. First operand 18544 states and 34569 transitions. cyclomatic complexity: 16062 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:40,806 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:40,806 INFO L93 Difference]: Finished difference Result 18530 states and 34543 transitions. [2024-10-12 00:47:40,807 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18530 states and 34543 transitions. [2024-10-12 00:47:40,872 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:40,925 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18530 states to 18530 states and 34543 transitions. [2024-10-12 00:47:40,925 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18451 [2024-10-12 00:47:40,942 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18451 [2024-10-12 00:47:40,942 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18530 states and 34543 transitions. [2024-10-12 00:47:40,942 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:40,942 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18530 states and 34543 transitions. [2024-10-12 00:47:40,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18530 states and 34543 transitions. [2024-10-12 00:47:41,104 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18530 to 18530. [2024-10-12 00:47:41,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18530 states, 18530 states have (on average 1.8641662169454938) internal successors, (34543), 18529 states have internal predecessors, (34543), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:41,367 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18530 states to 18530 states and 34543 transitions. [2024-10-12 00:47:41,367 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18530 states and 34543 transitions. [2024-10-12 00:47:41,367 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-12 00:47:41,368 INFO L425 stractBuchiCegarLoop]: Abstraction has 18530 states and 34543 transitions. [2024-10-12 00:47:41,368 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-10-12 00:47:41,368 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18530 states and 34543 transitions. [2024-10-12 00:47:41,431 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:41,432 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:41,432 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:41,433 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:41,433 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:41,433 INFO L745 eck$LassoCheckResult]: Stem: 521035#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 520601#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 520602#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 529884#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 526587#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 519630#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 519631#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 523468#L1317 assume !(0 == getOrigin_~person#1); 522909#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 517213#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 517214#L964 assume !(0 == initPersonOnFloor_~floor#1); 528896#L991 assume !(1 == initPersonOnFloor_~floor#1); 520930#L1018 assume !(2 == initPersonOnFloor_~floor#1); 515449#L1045 assume 3 == initPersonOnFloor_~floor#1; 515450#L1046 assume !(0 == initPersonOnFloor_~person#1); 529165#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 512579#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 512580#L756 assume !(0 == callOnFloor_~floorID#1); 512896#L759 assume !(1 == callOnFloor_~floorID#1); 512897#L762 assume !(2 == callOnFloor_~floorID#1); 513055#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 513056#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 526856#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 526857#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 529364#L1317-1 assume !(0 == getOrigin_~person#1); 523293#L1321-1 assume !(1 == getOrigin_~person#1); 521757#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 521758#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 513627#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 512163#L991-1 assume 1 == initPersonOnFloor_~floor#1; 512164#L992-2 assume !(0 == initPersonOnFloor_~person#1); 518485#L995-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 511550#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 530025#L756-2 assume !(0 == callOnFloor_~floorID#1); 530022#L759-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 518749#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 518629#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 518630#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 523846#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 523847#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 528589#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 513999#L3060 assume 0 != timeShift_~tmp~29#1; 514001#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 525975#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 525976#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 524429#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 517816#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 517818#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 521786#L3350-2 [2024-10-12 00:47:41,433 INFO L747 eck$LassoCheckResult]: Loop: 521786#L3350-2 assume !false; 529921#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 528124#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 528125#L3359-2 assume !false; 515091#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 515092#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 521786#L3350-2 [2024-10-12 00:47:41,434 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:41,434 INFO L85 PathProgramCache]: Analyzing trace with hash 1777575836, now seen corresponding path program 1 times [2024-10-12 00:47:41,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:41,434 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1904903025] [2024-10-12 00:47:41,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:41,434 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:41,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:41,533 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:41,533 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:41,533 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1904903025] [2024-10-12 00:47:41,533 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1904903025] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:41,533 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:41,534 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-12 00:47:41,534 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [696342394] [2024-10-12 00:47:41,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:41,534 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:41,534 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:41,534 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 6 times [2024-10-12 00:47:41,534 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:41,534 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1371958291] [2024-10-12 00:47:41,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:41,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:41,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:41,551 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:41,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:41,561 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:41,579 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:41,580 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-12 00:47:41,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-12 00:47:41,580 INFO L87 Difference]: Start difference. First operand 18530 states and 34543 transitions. cyclomatic complexity: 16050 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:42,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:42,071 INFO L93 Difference]: Finished difference Result 18524 states and 34530 transitions. [2024-10-12 00:47:42,071 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18524 states and 34530 transitions. [2024-10-12 00:47:42,157 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:42,213 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18524 states to 18524 states and 34530 transitions. [2024-10-12 00:47:42,214 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18445 [2024-10-12 00:47:42,231 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18445 [2024-10-12 00:47:42,231 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18524 states and 34530 transitions. [2024-10-12 00:47:42,231 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:42,231 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18524 states and 34530 transitions. [2024-10-12 00:47:42,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18524 states and 34530 transitions. [2024-10-12 00:47:42,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18524 to 18524. [2024-10-12 00:47:42,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18524 states, 18524 states have (on average 1.8640682358022025) internal successors, (34530), 18523 states have internal predecessors, (34530), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:42,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18524 states to 18524 states and 34530 transitions. [2024-10-12 00:47:42,668 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18524 states and 34530 transitions. [2024-10-12 00:47:42,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-12 00:47:42,669 INFO L425 stractBuchiCegarLoop]: Abstraction has 18524 states and 34530 transitions. [2024-10-12 00:47:42,669 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-10-12 00:47:42,669 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18524 states and 34530 transitions. [2024-10-12 00:47:42,714 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:42,714 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:42,714 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:42,715 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:42,715 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:42,715 INFO L745 eck$LassoCheckResult]: Stem: 558091#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 557657#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 557658#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 566944#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 563644#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 556686#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 556687#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 560525#L1317 assume !(0 == getOrigin_~person#1); 559966#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 554270#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 554271#L964 assume !(0 == initPersonOnFloor_~floor#1); 565954#L991 assume !(1 == initPersonOnFloor_~floor#1); 557986#L1018 assume !(2 == initPersonOnFloor_~floor#1); 552507#L1045 assume 3 == initPersonOnFloor_~floor#1; 552508#L1046 assume !(0 == initPersonOnFloor_~person#1); 566223#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 549637#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 549638#L756 assume !(0 == callOnFloor_~floorID#1); 549954#L759 assume !(1 == callOnFloor_~floorID#1); 549955#L762 assume !(2 == callOnFloor_~floorID#1); 550113#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 550114#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 563914#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 563915#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 566424#L1317-1 assume !(0 == getOrigin_~person#1); 560350#L1321-1 assume !(1 == getOrigin_~person#1); 558814#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 558815#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 550685#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 549222#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 549223#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 559983#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 553026#L1022-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 553027#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 567084#L756-2 assume !(0 == callOnFloor_~floorID#1); 567083#L759-2 assume !(1 == callOnFloor_~floorID#1); 567082#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 555805#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 555684#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 555685#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 560903#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 560904#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 565647#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 551057#L3060 assume 0 != timeShift_~tmp~29#1; 551059#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 563032#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 563033#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 561486#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 554873#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 554875#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 558843#L3350-2 [2024-10-12 00:47:42,715 INFO L747 eck$LassoCheckResult]: Loop: 558843#L3350-2 assume !false; 566981#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 565182#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 565183#L3359-2 assume !false; 552149#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 552150#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 558843#L3350-2 [2024-10-12 00:47:42,715 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:42,715 INFO L85 PathProgramCache]: Analyzing trace with hash 1937928637, now seen corresponding path program 1 times [2024-10-12 00:47:42,715 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:42,716 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [734990154] [2024-10-12 00:47:42,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:42,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:42,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:42,776 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:42,776 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:42,776 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [734990154] [2024-10-12 00:47:42,777 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [734990154] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:42,777 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:42,777 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-12 00:47:42,777 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1244286675] [2024-10-12 00:47:42,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:42,777 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:42,777 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:42,778 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 7 times [2024-10-12 00:47:42,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:42,778 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [159932607] [2024-10-12 00:47:42,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:42,778 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:42,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:42,788 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:42,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:42,795 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:42,810 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:42,810 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-12 00:47:42,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-12 00:47:42,811 INFO L87 Difference]: Start difference. First operand 18524 states and 34530 transitions. cyclomatic complexity: 16043 Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:43,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:43,150 INFO L93 Difference]: Finished difference Result 18540 states and 34542 transitions. [2024-10-12 00:47:43,150 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18540 states and 34542 transitions. [2024-10-12 00:47:43,212 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:43,258 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18540 states to 18540 states and 34542 transitions. [2024-10-12 00:47:43,258 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18461 [2024-10-12 00:47:43,269 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18461 [2024-10-12 00:47:43,269 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18540 states and 34542 transitions. [2024-10-12 00:47:43,269 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:43,269 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18540 states and 34542 transitions. [2024-10-12 00:47:43,287 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18540 states and 34542 transitions. [2024-10-12 00:47:43,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18540 to 18524. [2024-10-12 00:47:43,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18524 states, 18524 states have (on average 1.8636363636363635) internal successors, (34522), 18523 states have internal predecessors, (34522), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:43,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18524 states to 18524 states and 34522 transitions. [2024-10-12 00:47:43,694 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18524 states and 34522 transitions. [2024-10-12 00:47:43,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-12 00:47:43,695 INFO L425 stractBuchiCegarLoop]: Abstraction has 18524 states and 34522 transitions. [2024-10-12 00:47:43,695 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-10-12 00:47:43,695 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18524 states and 34522 transitions. [2024-10-12 00:47:43,733 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 4182 [2024-10-12 00:47:43,733 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:43,733 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:43,734 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:43,734 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:43,734 INFO L745 eck$LassoCheckResult]: Stem: 595160#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 594726#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 594727#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 604012#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 600714#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 593756#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 593757#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 597594#L1317 assume !(0 == getOrigin_~person#1); 597035#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 591339#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 591340#L964 assume !(0 == initPersonOnFloor_~floor#1); 603024#L991 assume !(1 == initPersonOnFloor_~floor#1); 595055#L1018 assume !(2 == initPersonOnFloor_~floor#1); 589577#L1045 assume 3 == initPersonOnFloor_~floor#1; 589578#L1046 assume !(0 == initPersonOnFloor_~person#1); 603293#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 586707#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 586708#L756 assume !(0 == callOnFloor_~floorID#1); 587024#L759 assume !(1 == callOnFloor_~floorID#1); 587025#L762 assume !(2 == callOnFloor_~floorID#1); 587183#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 587184#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 600984#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 600985#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 603493#L1317-1 assume !(0 == getOrigin_~person#1); 597419#L1321-1 assume !(1 == getOrigin_~person#1); 595883#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 595884#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 587755#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 586292#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 586293#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 597052#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 590096#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 590097#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 599165#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 604199#L756-2 assume !(0 == callOnFloor_~floorID#1); 604198#L759-2 assume !(1 == callOnFloor_~floorID#1); 604197#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 592875#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 592754#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 592755#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 597972#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 597973#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 602717#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 588127#L3060 assume 0 != timeShift_~tmp~29#1; 588129#L3061 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 600102#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 600103#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 598555#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 591943#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 591945#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 595912#L3350-2 [2024-10-12 00:47:43,734 INFO L747 eck$LassoCheckResult]: Loop: 595912#L3350-2 assume !false; 604049#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 602253#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 602254#L3359-2 assume !false; 589219#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 589220#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 595912#L3350-2 [2024-10-12 00:47:43,734 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:43,734 INFO L85 PathProgramCache]: Analyzing trace with hash -1066971836, now seen corresponding path program 1 times [2024-10-12 00:47:43,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:43,735 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1092181617] [2024-10-12 00:47:43,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:43,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:43,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:43,814 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:43,814 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:43,815 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1092181617] [2024-10-12 00:47:43,815 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1092181617] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:43,815 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:43,815 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-10-12 00:47:43,815 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1664426109] [2024-10-12 00:47:43,815 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:43,815 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:43,815 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:43,816 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 8 times [2024-10-12 00:47:43,816 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:43,816 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [533138209] [2024-10-12 00:47:43,816 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:43,816 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:43,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:43,827 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:43,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:43,835 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:43,850 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:43,851 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-12 00:47:43,851 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-12 00:47:43,851 INFO L87 Difference]: Start difference. First operand 18524 states and 34522 transitions. cyclomatic complexity: 16035 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:44,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:44,475 INFO L93 Difference]: Finished difference Result 34520 states and 64494 transitions. [2024-10-12 00:47:44,475 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34520 states and 64494 transitions. [2024-10-12 00:47:44,860 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 7224 [2024-10-12 00:47:44,942 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34520 states to 34520 states and 64494 transitions. [2024-10-12 00:47:44,943 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34362 [2024-10-12 00:47:44,969 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34362 [2024-10-12 00:47:44,970 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34520 states and 64494 transitions. [2024-10-12 00:47:44,971 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:44,971 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34520 states and 64494 transitions. [2024-10-12 00:47:45,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34520 states and 64494 transitions. [2024-10-12 00:47:45,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34520 to 29508. [2024-10-12 00:47:45,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29508 states, 29508 states have (on average 1.8641046495865528) internal successors, (55006), 29507 states have internal predecessors, (55006), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:45,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29508 states to 29508 states and 55006 transitions. [2024-10-12 00:47:45,334 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29508 states and 55006 transitions. [2024-10-12 00:47:45,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-12 00:47:45,334 INFO L425 stractBuchiCegarLoop]: Abstraction has 29508 states and 55006 transitions. [2024-10-12 00:47:45,335 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-10-12 00:47:45,335 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29508 states and 55006 transitions. [2024-10-12 00:47:45,407 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 7224 [2024-10-12 00:47:45,407 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:45,407 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:45,407 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:45,408 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:45,408 INFO L745 eck$LassoCheckResult]: Stem: 648272#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 647833#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 647834#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 657713#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 654017#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 646850#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 646851#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 650765#L1317 assume !(0 == getOrigin_~person#1); 650196#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 644408#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 644409#L964 assume !(0 == initPersonOnFloor_~floor#1); 656525#L991 assume !(1 == initPersonOnFloor_~floor#1); 648165#L1018 assume !(2 == initPersonOnFloor_~floor#1); 642634#L1045 assume 3 == initPersonOnFloor_~floor#1; 642635#L1046 assume !(0 == initPersonOnFloor_~person#1); 656837#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 639757#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 639758#L756 assume !(0 == callOnFloor_~floorID#1); 640074#L759 assume !(1 == callOnFloor_~floorID#1); 640075#L762 assume !(2 == callOnFloor_~floorID#1); 640233#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 640234#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 654302#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 654303#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 657078#L1317-1 assume !(0 == getOrigin_~person#1); 650586#L1321-1 assume !(1 == getOrigin_~person#1); 649016#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 649017#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 640806#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 639342#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 639343#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 650213#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 643155#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 643156#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 652396#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 657940#L756-2 assume !(0 == callOnFloor_~floorID#1); 657939#L759-2 assume !(1 == callOnFloor_~floorID#1); 657938#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 645958#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 645836#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 645837#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 651158#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 651159#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 656177#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 641179#L3060 assume !(0 != timeShift_~tmp~29#1);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 641180#L693-65 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 644272#isFloorCalling_returnLabel#66 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 644273#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 654654#L2777-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 657205#getCurrentFloorID_returnLabel#6 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 656234#L2781-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 652719#stopRequestedAtCurrentFloor_returnLabel#2 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 653126#L2929-2 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 653128#L3020-3 assume !(1 == ~doorState~0); 653145#L3020-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 647127#L693-68 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 644044#isFloorCalling_returnLabel#69 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 651287#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 645016#L2632-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 645017#getCurrentFloorID_returnLabel#9 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 641674#stopRequestedInDirection_returnLabel#3 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 639179#L3028-2 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 639181#L2689-3 assume !(1 == ~currentHeading~0); 656151#L2699-9 assume !(0 == ~currentFloorID~0); 654109#L2699-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 650738#L2705-7 havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 646983#L3037-5 havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__executivefloor } true; 660641#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 660639#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 660640#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 660642#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 660860#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 660859#L3350-2 [2024-10-12 00:47:45,408 INFO L747 eck$LassoCheckResult]: Loop: 660859#L3350-2 assume !false; 660858#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 660857#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 660855#L3359-2 assume !false; 660853#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 660854#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 660859#L3350-2 [2024-10-12 00:47:45,409 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:45,409 INFO L85 PathProgramCache]: Analyzing trace with hash -953121625, now seen corresponding path program 1 times [2024-10-12 00:47:45,409 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:45,409 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986670525] [2024-10-12 00:47:45,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:45,409 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:45,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:45,517 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:45,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:45,518 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1986670525] [2024-10-12 00:47:45,518 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1986670525] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:45,518 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:45,518 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-12 00:47:45,518 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200414083] [2024-10-12 00:47:45,518 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:45,518 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:45,518 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:45,518 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 9 times [2024-10-12 00:47:45,518 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:45,518 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2047546110] [2024-10-12 00:47:45,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:45,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:45,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:45,530 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:45,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:45,539 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:45,564 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:45,564 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-10-12 00:47:45,564 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2024-10-12 00:47:45,565 INFO L87 Difference]: Start difference. First operand 29508 states and 55006 transitions. cyclomatic complexity: 25572 Second operand has 8 states, 8 states have (on average 9.0) internal successors, (72), 7 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:46,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:46,507 INFO L93 Difference]: Finished difference Result 28742 states and 53134 transitions. [2024-10-12 00:47:46,507 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28742 states and 53134 transitions. [2024-10-12 00:47:46,639 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8602 [2024-10-12 00:47:46,723 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28742 states to 28742 states and 53134 transitions. [2024-10-12 00:47:46,723 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28505 [2024-10-12 00:47:46,745 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28505 [2024-10-12 00:47:46,745 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28742 states and 53134 transitions. [2024-10-12 00:47:46,745 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:46,746 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28742 states and 53134 transitions. [2024-10-12 00:47:46,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28742 states and 53134 transitions. [2024-10-12 00:47:47,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28742 to 28742. [2024-10-12 00:47:47,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28742 states, 28742 states have (on average 1.848653538375896) internal successors, (53134), 28741 states have internal predecessors, (53134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:47,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28742 states to 28742 states and 53134 transitions. [2024-10-12 00:47:47,266 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28742 states and 53134 transitions. [2024-10-12 00:47:47,266 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-10-12 00:47:47,266 INFO L425 stractBuchiCegarLoop]: Abstraction has 28742 states and 53134 transitions. [2024-10-12 00:47:47,266 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-10-12 00:47:47,267 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28742 states and 53134 transitions. [2024-10-12 00:47:47,336 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8602 [2024-10-12 00:47:47,336 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:47,336 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:47,337 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:47,337 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:47,337 INFO L745 eck$LassoCheckResult]: Stem: 705605#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 705209#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 705210#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 713755#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 710697#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 704318#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 704319#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 707832#L1317 assume !(0 == getOrigin_~person#1); 707322#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 702117#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 702118#L964 assume !(0 == initPersonOnFloor_~floor#1); 712807#L991 assume !(1 == initPersonOnFloor_~floor#1); 705504#L1018 assume !(2 == initPersonOnFloor_~floor#1); 700545#L1045 assume 3 == initPersonOnFloor_~floor#1; 700546#L1046 assume !(0 == initPersonOnFloor_~person#1); 713070#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 697938#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 697939#L756 assume !(0 == callOnFloor_~floorID#1); 698212#L759 assume !(1 == callOnFloor_~floorID#1); 698213#L762 assume !(2 == callOnFloor_~floorID#1); 698356#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 698357#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 710948#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 710949#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 713252#L1317-1 assume !(0 == getOrigin_~person#1); 707668#L1321-1 assume !(1 == getOrigin_~person#1); 706262#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 706263#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 698875#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 697568#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 697569#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 707339#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 700996#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 700997#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 709274#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 713894#L756-2 assume !(0 == callOnFloor_~floorID#1); 713893#L759-2 assume !(1 == callOnFloor_~floorID#1); 713892#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 703521#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 703408#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 703409#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 708164#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 708165#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 712533#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 699210#L3060 assume 0 != timeShift_~tmp~29#1; 699211#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 709670#L693 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 704144#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 708152#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 709591#L2777 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 703494#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 703495#L2781 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 697669#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 697670#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 705824#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 705825#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 713489#L693-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 707370#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 712062#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 713233#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 713234#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 711372#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 705462#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 705463#L2689 assume !(1 == ~currentHeading~0); 706410#L2699 assume !(0 == ~currentFloorID~0); 701013#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 711716#L2705-1 havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 705979#L3037-2 havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__executivefloor } true; 713921#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 713914#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 713915#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 713920#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 714045#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 714046#L3350-2 [2024-10-12 00:47:47,338 INFO L747 eck$LassoCheckResult]: Loop: 714046#L3350-2 assume !false; 714043#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 714044#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 714055#L3359-2 assume !false; 714051#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 714052#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 714046#L3350-2 [2024-10-12 00:47:47,338 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:47,338 INFO L85 PathProgramCache]: Analyzing trace with hash -1488758990, now seen corresponding path program 1 times [2024-10-12 00:47:47,338 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:47,338 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1896251153] [2024-10-12 00:47:47,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:47,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:47,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:47,438 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:47,439 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:47,439 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1896251153] [2024-10-12 00:47:47,439 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1896251153] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:47,439 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:47,439 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-12 00:47:47,439 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1311727508] [2024-10-12 00:47:47,439 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:47,439 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:47,440 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:47,440 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 10 times [2024-10-12 00:47:47,440 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:47,440 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [143760428] [2024-10-12 00:47:47,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:47,440 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:47,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:47,452 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:47,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:47,459 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:47,475 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:47,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-12 00:47:47,475 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-12 00:47:47,475 INFO L87 Difference]: Start difference. First operand 28742 states and 53134 transitions. cyclomatic complexity: 24526 Second operand has 4 states, 4 states have (on average 18.25) internal successors, (73), 3 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:52,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:47:52,223 INFO L93 Difference]: Finished difference Result 28742 states and 51879 transitions. [2024-10-12 00:47:52,223 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28742 states and 51879 transitions. [2024-10-12 00:47:52,316 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8602 [2024-10-12 00:47:52,382 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28742 states to 28742 states and 51879 transitions. [2024-10-12 00:47:52,382 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28505 [2024-10-12 00:47:52,400 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28505 [2024-10-12 00:47:52,400 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28742 states and 51879 transitions. [2024-10-12 00:47:52,401 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:47:52,401 INFO L218 hiAutomatonCegarLoop]: Abstraction has 28742 states and 51879 transitions. [2024-10-12 00:47:52,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28742 states and 51879 transitions. [2024-10-12 00:47:52,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28742 to 28742. [2024-10-12 00:47:52,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28742 states, 28742 states have (on average 1.8049892143900912) internal successors, (51879), 28741 states have internal predecessors, (51879), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:47:52,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28742 states to 28742 states and 51879 transitions. [2024-10-12 00:47:52,719 INFO L240 hiAutomatonCegarLoop]: Abstraction has 28742 states and 51879 transitions. [2024-10-12 00:47:52,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-12 00:47:52,720 INFO L425 stractBuchiCegarLoop]: Abstraction has 28742 states and 51879 transitions. [2024-10-12 00:47:52,720 INFO L332 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-10-12 00:47:52,720 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28742 states and 51879 transitions. [2024-10-12 00:47:52,789 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8602 [2024-10-12 00:47:52,789 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:47:52,789 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:47:52,790 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:47:52,790 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:47:52,790 INFO L745 eck$LassoCheckResult]: Stem: 763112#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 762711#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 762712#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 771718#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 768375#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 761806#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 761807#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 765380#L1317 assume !(0 == getOrigin_~person#1); 764868#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 759574#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 759575#L964 assume !(0 == initPersonOnFloor_~floor#1); 770619#L991 assume !(1 == initPersonOnFloor_~floor#1); 763012#L1018 assume !(2 == initPersonOnFloor_~floor#1); 758003#L1045 assume 3 == initPersonOnFloor_~floor#1; 758004#L1046 assume !(0 == initPersonOnFloor_~person#1); 770911#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 755411#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 755412#L756 assume !(0 == callOnFloor_~floorID#1); 755682#L759 assume !(1 == callOnFloor_~floorID#1); 755683#L762 assume !(2 == callOnFloor_~floorID#1); 755822#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 755823#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 768637#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 768638#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 771119#L1317-1 assume !(0 == getOrigin_~person#1); 765215#L1321-1 assume !(1 == getOrigin_~person#1); 763779#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 763780#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 756332#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 755049#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 755050#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 764887#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 758452#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 758453#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 766879#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 771949#L756-2 assume !(0 == callOnFloor_~floorID#1); 771948#L759-2 assume !(1 == callOnFloor_~floorID#1); 771947#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 760992#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 760879#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 760880#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 765726#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 765727#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 770319#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 756667#L3060 assume 0 != timeShift_~tmp~29#1; 756668#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 767301#L693 assume !(0 == isFloorCalling_~floorID#1); 767302#L697 assume !(1 == isFloorCalling_~floorID#1); 770057#L701 assume !(2 == isFloorCalling_~floorID#1); 761625#L705 assume !(3 == isFloorCalling_~floorID#1); 761626#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 765713#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 765714#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 767219#L2777 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 760965#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 760966#L2781 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 755150#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 755151#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 763333#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 763334#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 771380#L693-3 assume !(0 == isFloorCalling_~floorID#1); 764918#L697-3 assume !(1 == isFloorCalling_~floorID#1); 764919#L701-3 assume !(2 == isFloorCalling_~floorID#1); 764999#L705-3 assume !(3 == isFloorCalling_~floorID#1); 765000#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 769820#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 769821#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 771096#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 771097#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 769081#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 762967#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 762968#L2689 assume !(1 == ~currentHeading~0); 763932#L2699 assume !(0 == ~currentFloorID~0); 758467#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 769448#L2705-1 havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 763491#L3037-2 havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__executivefloor } true; 771976#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 771969#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 771970#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 771975#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 772101#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 772102#L3350-2 [2024-10-12 00:47:52,790 INFO L747 eck$LassoCheckResult]: Loop: 772102#L3350-2 assume !false; 772099#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 772100#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 772112#L3359-2 assume !false; 772108#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 772109#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 772102#L3350-2 [2024-10-12 00:47:52,791 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:52,791 INFO L85 PathProgramCache]: Analyzing trace with hash 2092609990, now seen corresponding path program 1 times [2024-10-12 00:47:52,791 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:52,791 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1987197127] [2024-10-12 00:47:52,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:52,791 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:52,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:47:53,068 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:47:53,068 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:47:53,068 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1987197127] [2024-10-12 00:47:53,068 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1987197127] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:47:53,069 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:47:53,069 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-12 00:47:53,070 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1562853814] [2024-10-12 00:47:53,070 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:47:53,071 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:47:53,071 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:47:53,071 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 11 times [2024-10-12 00:47:53,071 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:47:53,071 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1364973580] [2024-10-12 00:47:53,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:47:53,072 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:47:53,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:53,083 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:47:53,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:47:53,089 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:47:53,103 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:47:53,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-10-12 00:47:53,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-10-12 00:47:53,104 INFO L87 Difference]: Start difference. First operand 28742 states and 51879 transitions. cyclomatic complexity: 23271 Second operand has 6 states, 6 states have (on average 13.5) internal successors, (81), 5 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:48:01,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:48:01,080 INFO L93 Difference]: Finished difference Result 58497 states and 104304 transitions. [2024-10-12 00:48:01,080 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58497 states and 104304 transitions. [2024-10-12 00:48:01,281 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 17482 [2024-10-12 00:48:01,428 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58497 states to 58497 states and 104304 transitions. [2024-10-12 00:48:01,428 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58023 [2024-10-12 00:48:01,464 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58023 [2024-10-12 00:48:01,464 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58497 states and 104304 transitions. [2024-10-12 00:48:01,465 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:48:01,465 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58497 states and 104304 transitions. [2024-10-12 00:48:01,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58497 states and 104304 transitions. [2024-10-12 00:48:02,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58497 to 56860. [2024-10-12 00:48:02,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56860 states, 56860 states have (on average 1.8056102708406612) internal successors, (102667), 56859 states have internal predecessors, (102667), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:48:02,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56860 states to 56860 states and 102667 transitions. [2024-10-12 00:48:02,426 INFO L240 hiAutomatonCegarLoop]: Abstraction has 56860 states and 102667 transitions. [2024-10-12 00:48:02,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-10-12 00:48:02,427 INFO L425 stractBuchiCegarLoop]: Abstraction has 56860 states and 102667 transitions. [2024-10-12 00:48:02,427 INFO L332 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-10-12 00:48:02,427 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56860 states and 102667 transitions. [2024-10-12 00:48:02,563 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 17048 [2024-10-12 00:48:02,563 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:48:02,563 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:48:02,564 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:48:02,564 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:48:02,564 INFO L745 eck$LassoCheckResult]: Stem: 850615#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 850203#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 850204#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 860884#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 856463#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 849235#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 849236#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 853108#L1317 assume !(0 == getOrigin_~person#1); 852523#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 846900#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 846901#L964 assume !(0 == initPersonOnFloor_~floor#1); 859258#L991 assume !(1 == initPersonOnFloor_~floor#1); 850513#L1018 assume !(2 == initPersonOnFloor_~floor#1); 845284#L1045 assume 3 == initPersonOnFloor_~floor#1; 845285#L1046 assume !(0 == initPersonOnFloor_~person#1); 859641#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 842667#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 842668#L756 assume !(0 == callOnFloor_~floorID#1); 842940#L759 assume !(1 == callOnFloor_~floorID#1); 842941#L762 assume !(2 == callOnFloor_~floorID#1); 843080#L765 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 843081#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 856773#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 856774#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 859943#L1317-1 assume !(0 == getOrigin_~person#1); 852921#L1321-1 assume !(1 == getOrigin_~person#1); 851333#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 851334#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 843594#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 842303#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 842304#L1018-1 assume !(2 == initPersonOnFloor_~floor#1); 854632#L1045-1 assume !(3 == initPersonOnFloor_~floor#1); 858517#L1072-2 assume !(4 == initPersonOnFloor_~floor#1); 844898#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 856557#L756-2 assume !(0 == callOnFloor_~floorID#1); 856558#L759-2 assume !(1 == callOnFloor_~floorID#1); 851361#L762-2 assume !(2 == callOnFloor_~floorID#1); 851362#L765-2 assume !(3 == callOnFloor_~floorID#1); 848387#L768-3 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 848388#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 861442#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 861441#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 861440#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 861439#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 861438#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 861437#L3060 assume 0 != timeShift_~tmp~29#1; 861436#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 861435#L693 assume !(0 == isFloorCalling_~floorID#1); 861434#L697 assume !(1 == isFloorCalling_~floorID#1); 861433#L701 assume !(2 == isFloorCalling_~floorID#1); 861432#L705 assume !(3 == isFloorCalling_~floorID#1); 861431#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 861430#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 861429#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 861427#L2777 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 848361#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 848362#L2781 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 848392#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 862289#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 862287#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 862283#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 862279#L693-3 assume !(0 == isFloorCalling_~floorID#1); 862275#L697-3 assume !(1 == isFloorCalling_~floorID#1); 862268#L701-3 assume !(2 == isFloorCalling_~floorID#1); 862098#L705-3 assume !(3 == isFloorCalling_~floorID#1); 862097#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 862096#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 862094#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 861955#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 861684#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 861638#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 861633#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 861629#L2689 assume !(1 == ~currentHeading~0); 861627#L2699 assume !(0 == ~currentFloorID~0); 861623#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 861602#L2705-1 havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 861601#L3037-2 havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__executivefloor } true; 861517#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 861510#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 861511#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 861516#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 861722#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 861723#L3350-2 [2024-10-12 00:48:02,564 INFO L747 eck$LassoCheckResult]: Loop: 861723#L3350-2 assume !false; 861719#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 861718#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 861717#L3359-2 assume !false; 861715#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 861716#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 861723#L3350-2 [2024-10-12 00:48:02,565 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:48:02,565 INFO L85 PathProgramCache]: Analyzing trace with hash -791097224, now seen corresponding path program 1 times [2024-10-12 00:48:02,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:48:02,565 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [832279237] [2024-10-12 00:48:02,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:48:02,565 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:48:02,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:48:02,636 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:48:02,636 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:48:02,637 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [832279237] [2024-10-12 00:48:02,637 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [832279237] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:48:02,637 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:48:02,637 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-12 00:48:02,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [10863878] [2024-10-12 00:48:02,637 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:48:02,638 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:48:02,638 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:48:02,638 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 12 times [2024-10-12 00:48:02,638 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:48:02,638 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [472709051] [2024-10-12 00:48:02,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:48:02,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:48:02,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:48:02,649 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:48:02,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:48:02,655 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:48:02,671 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:48:02,671 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-12 00:48:02,671 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-12 00:48:02,671 INFO L87 Difference]: Start difference. First operand 56860 states and 102667 transitions. cyclomatic complexity: 46075 Second operand has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:48:03,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:48:03,012 INFO L93 Difference]: Finished difference Result 56856 states and 102641 transitions. [2024-10-12 00:48:03,012 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 56856 states and 102641 transitions. [2024-10-12 00:48:03,566 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 17048 [2024-10-12 00:48:03,723 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 56856 states to 56856 states and 102641 transitions. [2024-10-12 00:48:03,723 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 56382 [2024-10-12 00:48:03,769 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 56382 [2024-10-12 00:48:03,770 INFO L73 IsDeterministic]: Start isDeterministic. Operand 56856 states and 102641 transitions. [2024-10-12 00:48:03,799 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-10-12 00:48:03,799 INFO L218 hiAutomatonCegarLoop]: Abstraction has 56856 states and 102641 transitions. [2024-10-12 00:48:03,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56856 states and 102641 transitions. [2024-10-12 00:48:04,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56856 to 56856. [2024-10-12 00:48:04,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56856 states, 56856 states have (on average 1.8052800056282539) internal successors, (102641), 56855 states have internal predecessors, (102641), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:48:04,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56856 states to 56856 states and 102641 transitions. [2024-10-12 00:48:04,399 INFO L240 hiAutomatonCegarLoop]: Abstraction has 56856 states and 102641 transitions. [2024-10-12 00:48:04,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-12 00:48:04,400 INFO L425 stractBuchiCegarLoop]: Abstraction has 56856 states and 102641 transitions. [2024-10-12 00:48:04,400 INFO L332 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-10-12 00:48:04,400 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 56856 states and 102641 transitions. [2024-10-12 00:48:04,883 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 17048 [2024-10-12 00:48:04,883 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-12 00:48:04,884 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-12 00:48:04,884 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-12 00:48:04,884 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-10-12 00:48:04,884 INFO L745 eck$LassoCheckResult]: Stem: 964057#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~blocked~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 963660#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret30#1, main_~retValue_acc~1#1, main_~tmp~11#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; 963661#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 972643#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 969306#valid_product_returnLabel#1 main_#t~ret30#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;assume { :end_inline_valid_product } true;main_~tmp~11#1 := main_#t~ret30#1;havoc main_#t~ret30#1; 962760#L591 assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; 962761#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;havoc aliceCall_~tmp~4#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 966338#L1317 assume !(0 == getOrigin_~person#1); 965814#L1321 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 960544#getOrigin_returnLabel#1 aliceCall_#t~ret19#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~4#1 := aliceCall_#t~ret19#1;havoc aliceCall_#t~ret19#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~4#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 960545#L964 assume !(0 == initPersonOnFloor_~floor#1); 971568#L991 assume !(1 == initPersonOnFloor_~floor#1); 963957#L1018 assume !(2 == initPersonOnFloor_~floor#1); 958972#L1045 assume 3 == initPersonOnFloor_~floor#1; 958973#L1046 assume !(0 == initPersonOnFloor_~person#1); 971839#L1049 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 956390#L1072-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 956391#L756 assume !(0 == callOnFloor_~floorID#1); 956661#L759 assume !(1 == callOnFloor_~floorID#1); 956662#L762 assume !(2 == callOnFloor_~floorID#1); 956801#L765 assume !(3 == callOnFloor_~floorID#1); 956803#L768 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 966586#L768-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 972882#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 972881#aliceCall_returnLabel#1 havoc aliceCall_#t~ret19#1, aliceCall_~tmp~4#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;havoc angelinaCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~6#1; 972880#L1317-1 assume !(0 == getOrigin_~person#1); 972879#L1321-1 assume !(1 == getOrigin_~person#1); 972878#L1325-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~6#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~6#1; 972877#getOrigin_returnLabel#2 angelinaCall_#t~ret20#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~6#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~5#1 := angelinaCall_#t~ret20#1;havoc angelinaCall_#t~ret20#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 972876#L964-1 assume !(0 == initPersonOnFloor_~floor#1); 972875#L991-1 assume !(1 == initPersonOnFloor_~floor#1); 972874#L1018-1 assume 2 == initPersonOnFloor_~floor#1; 972873#L1019-2 assume !(0 == initPersonOnFloor_~person#1); 972872#L1022-2 assume !(1 == initPersonOnFloor_~person#1); 972871#L1025-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 972867#L1072-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 972866#L756-2 assume !(0 == callOnFloor_~floorID#1); 972865#L759-2 assume !(1 == callOnFloor_~floorID#1); 972863#L762-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 961958#L768-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 972861#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 972860#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret20#1, angelinaCall_~tmp~5#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret115#1, timeShift_~tmp~29#1;havoc timeShift_~tmp~29#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;havoc getCurrentHeading_~retValue_acc~17#1;getCurrentHeading_~retValue_acc~17#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~17#1; 972859#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret10#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~17#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret10#1;havoc __utac_acc__Specification13_spec__1_#t~ret10#1; 972858#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret10#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 972857#areDoorsOpen_returnLabel#1 timeShift_#t~ret115#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~29#1 := timeShift_#t~ret115#1;havoc timeShift_#t~ret115#1; 972856#L3060 assume 0 != timeShift_~tmp~29#1; 972855#L3061 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__executivefloor } true;havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;havoc timeShift__wrappee__executivefloor_~tmp~28#1;havoc timeShift__wrappee__executivefloor_~tmp___0~12#1;havoc timeShift__wrappee__executivefloor_~tmp___1~7#1;havoc timeShift__wrappee__executivefloor_~tmp___2~5#1;havoc timeShift__wrappee__executivefloor_~tmp___3~4#1;havoc timeShift__wrappee__executivefloor_~tmp___4~3#1;havoc timeShift__wrappee__executivefloor_~tmp___5~2#1;havoc timeShift__wrappee__executivefloor_~tmp___6~2#1;havoc timeShift__wrappee__executivefloor_~tmp___7~2#1;havoc timeShift__wrappee__executivefloor_~tmp___8~2#1;havoc timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~27#1;havoc stopRequestedAtCurrentFloor_~tmp~26#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 972854#L693 assume !(0 == isFloorCalling_~floorID#1); 972853#L697 assume !(1 == isFloorCalling_~floorID#1); 972852#L701 assume !(2 == isFloorCalling_~floorID#1); 972851#L705 assume !(3 == isFloorCalling_~floorID#1); 972850#L709 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 972849#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 972848#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret88#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~26#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1; 972847#L2777 assume 0 != stopRequestedAtCurrentFloor_~tmp~26#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 961931#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret89#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret89#1;havoc stopRequestedAtCurrentFloor_#t~ret89#1; 961932#L2781 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~27#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~27#1; 956132#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__executivefloor_#t~ret104#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_#t~ret89#1, stopRequestedAtCurrentFloor_#t~ret90#1, stopRequestedAtCurrentFloor_#t~ret91#1, stopRequestedAtCurrentFloor_~retValue_acc~27#1, stopRequestedAtCurrentFloor_~tmp~26#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__executivefloor_~tmp___9~2#1 := timeShift__wrappee__executivefloor_#t~ret104#1;havoc timeShift__wrappee__executivefloor_#t~ret104#1; 956133#L2929 assume !(0 != timeShift__wrappee__executivefloor_~tmp___9~2#1); 964284#L3020 assume 1 == ~doorState~0;~doorState~0 := 0; 964285#L3020-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~23#1;havoc stopRequestedInDirection_~tmp~22#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~6#1;havoc stopRequestedInDirection_~__cil_tmp8~7#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;havoc isExecutiveFloorCalling_~retValue_acc~30#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~2#1; 972310#L693-3 assume !(0 == isFloorCalling_~floorID#1); 965864#L697-3 assume !(1 == isFloorCalling_~floorID#1); 965865#L701-3 assume !(2 == isFloorCalling_~floorID#1); 965949#L705-3 assume !(3 == isFloorCalling_~floorID#1); 965950#L709-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~2#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~2#1; 970769#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret144#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~2#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~30#1 := isExecutiveFloorCalling_#t~ret144#1;havoc isExecutiveFloorCalling_#t~ret144#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~30#1; 970770#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret144#1, isExecutiveFloorCalling_~retValue_acc~30#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 972027#L2632 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 972029#getCurrentFloorID_returnLabel#4 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~22#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~6#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~7#1 := (if stopRequestedInDirection_~tmp~22#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~23#1 := (if stopRequestedInDirection_~__cil_tmp8~7#1 == stopRequestedInDirection_~__cil_tmp7~6#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~23#1; 973095#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__executivefloor_#t~ret111#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~23#1, stopRequestedInDirection_~tmp~22#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~6#1, stopRequestedInDirection_~__cil_tmp8~7#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__executivefloor_~tmp___8~2#1 := timeShift__wrappee__executivefloor_#t~ret111#1;havoc timeShift__wrappee__executivefloor_#t~ret111#1; 973091#L3028 assume 0 != timeShift__wrappee__executivefloor_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~23#1;~currentHeading~0 := continueInDirection_~dir#1; 973087#L2689 assume !(1 == ~currentHeading~0); 973081#L2699 assume !(0 == ~currentFloorID~0); 973077#L2699-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 973070#L2705-1 havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~23#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 973001#L3037-2 havoc timeShift__wrappee__executivefloor_#t~ret104#1, timeShift__wrappee__executivefloor_#t~ret105#1, timeShift__wrappee__executivefloor_#t~ret106#1, timeShift__wrappee__executivefloor_#t~ret107#1, timeShift__wrappee__executivefloor_#t~ret108#1, timeShift__wrappee__executivefloor_#t~ret109#1, timeShift__wrappee__executivefloor_#t~ret110#1, timeShift__wrappee__executivefloor_#t~ret111#1, timeShift__wrappee__executivefloor_#t~ret112#1, timeShift__wrappee__executivefloor_#t~ret113#1, timeShift__wrappee__executivefloor_#t~ret114#1, timeShift__wrappee__executivefloor_~tmp~28#1, timeShift__wrappee__executivefloor_~tmp___0~12#1, timeShift__wrappee__executivefloor_~tmp___1~7#1, timeShift__wrappee__executivefloor_~tmp___2~5#1, timeShift__wrappee__executivefloor_~tmp___3~4#1, timeShift__wrappee__executivefloor_~tmp___4~3#1, timeShift__wrappee__executivefloor_~tmp___5~2#1, timeShift__wrappee__executivefloor_~tmp___6~2#1, timeShift__wrappee__executivefloor_~tmp___7~2#1, timeShift__wrappee__executivefloor_~tmp___8~2#1, timeShift__wrappee__executivefloor_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__executivefloor } true; 972917#L3060-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret11#1, __utac_acc__Specification13_spec__2_#t~ret12#1, __utac_acc__Specification13_spec__2_#t~ret13#1, __utac_acc__Specification13_spec__2_#t~ret14#1, __utac_acc__Specification13_spec__2_#t~ret15#1, __utac_acc__Specification13_spec__2_#t~ret16#1, __utac_acc__Specification13_spec__2_~tmp~2#1, __utac_acc__Specification13_spec__2_~tmp___0~2#1, __utac_acc__Specification13_spec__2_~tmp___1~2#1, __utac_acc__Specification13_spec__2_~tmp___2~0#1, __utac_acc__Specification13_spec__2_~tmp___3~0#1, __utac_acc__Specification13_spec__2_~tmp___4~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;havoc __utac_acc__Specification13_spec__2_~tmp~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~2#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~0#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~0#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~0#1 / 3); 972910#L188 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~0#1; 972911#L189 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~29#1, existInLiftCallsInDirection_~i~3#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~29#1;havoc existInLiftCallsInDirection_~i~3#1;havoc existInLiftCallsInDirection_~i___0~0#1; 972916#L3280 assume !(1 == existInLiftCallsInDirection_~d#1); 973051#L3346 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 973052#L3350-2 [2024-10-12 00:48:04,885 INFO L747 eck$LassoCheckResult]: Loop: 973052#L3350-2 assume !false; 973049#L3351 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 973050#L3352 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 973066#L3359-2 assume !false; 973059#L3360 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 973060#L3418 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 973052#L3350-2 [2024-10-12 00:48:04,886 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:48:04,886 INFO L85 PathProgramCache]: Analyzing trace with hash 1465801670, now seen corresponding path program 1 times [2024-10-12 00:48:04,886 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:48:04,886 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97333069] [2024-10-12 00:48:04,886 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:48:04,886 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:48:04,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-12 00:48:04,992 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-12 00:48:04,992 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-12 00:48:04,992 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [97333069] [2024-10-12 00:48:04,992 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [97333069] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-12 00:48:04,992 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-12 00:48:04,993 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-12 00:48:04,993 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2130934437] [2024-10-12 00:48:04,993 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-12 00:48:04,993 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-12 00:48:04,993 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-12 00:48:04,993 INFO L85 PathProgramCache]: Analyzing trace with hash -2025047829, now seen corresponding path program 13 times [2024-10-12 00:48:04,993 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-12 00:48:04,993 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [563731843] [2024-10-12 00:48:04,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-12 00:48:04,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-12 00:48:05,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:48:05,004 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-12 00:48:05,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-12 00:48:05,011 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-12 00:48:05,029 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-12 00:48:05,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-12 00:48:05,030 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-12 00:48:05,030 INFO L87 Difference]: Start difference. First operand 56856 states and 102641 transitions. cyclomatic complexity: 46053 Second operand has 5 states, 5 states have (on average 16.4) internal successors, (82), 5 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-12 00:48:05,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-12 00:48:05,418 INFO L93 Difference]: Finished difference Result 56873 states and 102649 transitions. [2024-10-12 00:48:05,418 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 56873 states and 102649 transitions. [2024-10-12 00:48:05,629 INFO L131 ngComponentsAnalysis]: Automaton has 244 accepting balls. 17048