./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 826ab2ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f89a8ce65f650dd979d04d2db9dc53ba483e2a2b64be3f70ae15b036e4b11b5a --- Real Ultimate output --- This is Ultimate 0.3.0-dev-826ab2b [2024-11-13 14:43:43,724 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-13 14:43:43,819 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-11-13 14:43:43,828 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-13 14:43:43,828 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-13 14:43:43,861 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-13 14:43:43,861 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-13 14:43:43,862 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-13 14:43:43,863 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-11-13 14:43:43,863 INFO L153 SettingsManager]: * Use memory slicer=true [2024-11-13 14:43:43,865 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-13 14:43:43,865 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-13 14:43:43,865 INFO L153 SettingsManager]: * Use SBE=true [2024-11-13 14:43:43,865 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-11-13 14:43:43,866 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-11-13 14:43:43,866 INFO L153 SettingsManager]: * Use old map elimination=false [2024-11-13 14:43:43,866 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-11-13 14:43:43,866 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-11-13 14:43:43,866 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-11-13 14:43:43,866 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-13 14:43:43,866 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-11-13 14:43:43,866 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-13 14:43:43,866 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-13 14:43:43,866 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-11-13 14:43:43,867 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-13 14:43:43,867 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-13 14:43:43,868 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-11-13 14:43:43,868 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-13 14:43:43,868 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-11-13 14:43:43,869 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-11-13 14:43:43,869 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f89a8ce65f650dd979d04d2db9dc53ba483e2a2b64be3f70ae15b036e4b11b5a [2024-11-13 14:43:44,163 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-13 14:43:44,175 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-13 14:43:44,177 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-13 14:43:44,178 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-13 14:43:44,179 INFO L274 PluginConnector]: CDTParser initialized [2024-11-13 14:43:44,180 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/../../sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c Unable to find full path for "g++" [2024-11-13 14:43:46,032 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-13 14:43:46,414 INFO L384 CDTParser]: Found 1 translation units. [2024-11-13 14:43:46,415 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/sv-benchmarks/c/product-lines/elevator_spec13_product22.cil.c [2024-11-13 14:43:46,440 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/data/74fe45217/3f34f5e1d3af40ca82d8b60383f7c52d/FLAG005947908 [2024-11-13 14:43:46,464 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/data/74fe45217/3f34f5e1d3af40ca82d8b60383f7c52d [2024-11-13 14:43:46,466 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-13 14:43:46,470 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-13 14:43:46,471 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-13 14:43:46,471 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-13 14:43:46,478 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-13 14:43:46,479 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 02:43:46" (1/1) ... [2024-11-13 14:43:46,481 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@25be91e0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:46, skipping insertion in model container [2024-11-13 14:43:46,482 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 02:43:46" (1/1) ... [2024-11-13 14:43:46,551 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-13 14:43:47,168 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-13 14:43:47,196 INFO L200 MainTranslator]: Completed pre-run [2024-11-13 14:43:47,206 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [48] [2024-11-13 14:43:47,207 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [68] [2024-11-13 14:43:47,208 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [77] [2024-11-13 14:43:47,208 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [443] [2024-11-13 14:43:47,209 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [2020] [2024-11-13 14:43:47,209 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2682] [2024-11-13 14:43:47,209 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [2775] [2024-11-13 14:43:47,209 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [2893] [2024-11-13 14:43:47,209 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [2931] [2024-11-13 14:43:47,210 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification13_spec.i","") [3279] [2024-11-13 14:43:47,366 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-13 14:43:47,407 INFO L204 MainTranslator]: Completed translation [2024-11-13 14:43:47,408 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47 WrapperNode [2024-11-13 14:43:47,409 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-13 14:43:47,411 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-13 14:43:47,411 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-13 14:43:47,411 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-13 14:43:47,423 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:47,452 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:48,544 INFO L138 Inliner]: procedures = 92, calls = 345, calls flagged for inlining = 197, calls inlined = 1765, statements flattened = 63871 [2024-11-13 14:43:48,545 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-13 14:43:48,547 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-13 14:43:48,547 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-13 14:43:48,547 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-13 14:43:48,557 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:48,557 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:48,670 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:48,913 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-11-13 14:43:48,913 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:48,913 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:49,295 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:49,631 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:49,690 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:49,942 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:50,383 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-13 14:43:50,390 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-13 14:43:50,390 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-13 14:43:50,390 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-13 14:43:50,391 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (1/1) ... [2024-11-13 14:43:50,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:43:50,430 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:43:50,466 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:43:50,475 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-11-13 14:43:50,534 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-13 14:43:50,535 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-11-13 14:43:50,535 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-11-13 14:43:50,535 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-11-13 14:43:50,536 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-11-13 14:43:50,536 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-11-13 14:43:50,536 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-11-13 14:43:50,537 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-11-13 14:43:50,538 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-11-13 14:43:50,538 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-11-13 14:43:50,538 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-11-13 14:43:50,538 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-13 14:43:50,538 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-13 14:43:50,946 INFO L238 CfgBuilder]: Building ICFG [2024-11-13 14:43:50,950 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-13 14:44:20,558 INFO L? ?]: Removed 28142 outVars from TransFormulas that were not future-live. [2024-11-13 14:44:20,559 INFO L287 CfgBuilder]: Performing block encoding [2024-11-13 14:44:20,758 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-13 14:44:20,759 INFO L316 CfgBuilder]: Removed 61 assume(true) statements. [2024-11-13 14:44:20,759 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 02:44:20 BoogieIcfgContainer [2024-11-13 14:44:20,759 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-13 14:44:20,760 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-11-13 14:44:20,761 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-11-13 14:44:20,766 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-11-13 14:44:20,767 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-13 14:44:20,767 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.11 02:43:46" (1/3) ... [2024-11-13 14:44:20,768 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@54b8aa12 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.11 02:44:20, skipping insertion in model container [2024-11-13 14:44:20,768 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-13 14:44:20,768 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 02:43:47" (2/3) ... [2024-11-13 14:44:20,769 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@54b8aa12 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.11 02:44:20, skipping insertion in model container [2024-11-13 14:44:20,769 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-11-13 14:44:20,769 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 02:44:20" (3/3) ... [2024-11-13 14:44:20,770 INFO L333 chiAutomizerObserver]: Analyzing ICFG elevator_spec13_product22.cil.c [2024-11-13 14:44:21,033 INFO L299 stractBuchiCegarLoop]: Interprodecural is true [2024-11-13 14:44:21,033 INFO L300 stractBuchiCegarLoop]: Hoare is None [2024-11-13 14:44:21,034 INFO L301 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-11-13 14:44:21,034 INFO L302 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-11-13 14:44:21,034 INFO L303 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-11-13 14:44:21,034 INFO L304 stractBuchiCegarLoop]: Difference is false [2024-11-13 14:44:21,034 INFO L305 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-11-13 14:44:21,034 INFO L309 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-11-13 14:44:21,083 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 17402 states, 17401 states have (on average 1.8835124418136888) internal successors, (32775), 17401 states have internal predecessors, (32775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:21,473 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3966 [2024-11-13 14:44:21,474 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:21,474 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:21,484 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:21,484 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:21,484 INFO L331 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-11-13 14:44:21,538 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 17402 states, 17401 states have (on average 1.8835124418136888) internal successors, (32775), 17401 states have internal predecessors, (32775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:21,752 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3966 [2024-11-13 14:44:21,752 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:21,753 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:21,755 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:21,755 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:21,762 INFO L745 eck$LassoCheckResult]: Stem: 4464#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 4219#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 16048#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 15733#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 9233#valid_product_returnLabel#1true main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 16069#L3266true assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 10059#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 404#L2819true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 2330#getOrigin_returnLabel#1true aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3877#L2375true assume 0 == initPersonOnFloor_~floor#1; 15891#L2376true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 13627#L2483-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 7134#L2167true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 11150#L2179-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 9544#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 15671#aliceCall_returnLabel#1true havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 2570#L2819-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 8944#getOrigin_returnLabel#2true angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7086#L2375-1true assume 0 == initPersonOnFloor_~floor#1; 10016#L2376-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 12645#L2483-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 16569#L2167-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4296#L2179-5true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 3095#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 7077#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 6584#getCurrentHeading_returnLabel#1true __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 12012#__utac_acc__Specification13_spec__1_returnLabel#1true havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 13757#areDoorsOpen_returnLabel#1true timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 9427#L1647true assume 0 != timeShift_~tmp~14#1; 13564#L1648true assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 16850#L1647-1true assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 12996#L3305true assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 10174#L3306true assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 2437#L1867true assume 1 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i~0#1 := 0;existInLiftCallsInDirection_~i~0#1 := 1 + ~currentFloorID~0; 7347#L1871-2true [2024-11-13 14:44:21,766 INFO L747 eck$LassoCheckResult]: Loop: 7347#L1871-2true assume !false; 71#L1872true assume existInLiftCallsInDirection_~i~0#1 < 5; 2744#L1873true assume !(0 == existInLiftCallsInDirection_~i~0#1); 884#$Ultimate##6932true assume !(1 == existInLiftCallsInDirection_~i~0#1); 3361#$Ultimate##6936true assume !(2 == existInLiftCallsInDirection_~i~0#1); 7267#$Ultimate##6940true assume !(3 == existInLiftCallsInDirection_~i~0#1); 6412#$Ultimate##6944true assume !(4 == existInLiftCallsInDirection_~i~0#1); 16549#L1914-1true existInLiftCallsInDirection_~i~0#1 := 1 + existInLiftCallsInDirection_~i~0#1; 7347#L1871-2true [2024-11-13 14:44:21,771 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:21,775 INFO L85 PathProgramCache]: Analyzing trace with hash -1544398965, now seen corresponding path program 1 times [2024-11-13 14:44:21,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:21,788 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629135206] [2024-11-13 14:44:21,789 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:21,790 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:21,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:22,341 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:22,342 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:22,342 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629135206] [2024-11-13 14:44:22,342 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [629135206] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:22,343 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:22,343 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-13 14:44:22,344 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1102217719] [2024-11-13 14:44:22,345 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:22,349 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:22,350 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:22,350 INFO L85 PathProgramCache]: Analyzing trace with hash -884435459, now seen corresponding path program 1 times [2024-11-13 14:44:22,350 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:22,350 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1962354498] [2024-11-13 14:44:22,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:22,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:22,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:22,372 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:22,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:22,406 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:22,474 INFO L204 LassoAnalysis]: Preferences: [2024-11-13 14:44:22,475 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-13 14:44:22,475 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-13 14:44:22,475 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-13 14:44:22,475 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2024-11-13 14:44:22,475 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:44:22,476 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-13 14:44:22,476 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-13 14:44:22,476 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product22.cil.c_Iteration1_Loop [2024-11-13 14:44:22,476 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-13 14:44:22,476 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-13 14:44:22,497 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 14:44:22,596 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-13 14:44:22,597 INFO L365 LassoAnalysis]: Checking for nontermination... [2024-11-13 14:44:22,598 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:44:22,598 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:44:22,601 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:44:22,605 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2024-11-13 14:44:22,605 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2024-11-13 14:44:22,606 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 14:44:22,647 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2024-11-13 14:44:22,647 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:44:22,648 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:44:22,650 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:44:22,652 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2024-11-13 14:44:22,653 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2024-11-13 14:44:22,653 INFO L160 nArgumentSynthesizer]: Using integer mode. [2024-11-13 14:44:22,697 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2024-11-13 14:44:22,701 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2024-11-13 14:44:22,701 INFO L204 LassoAnalysis]: Preferences: [2024-11-13 14:44:22,701 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2024-11-13 14:44:22,701 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2024-11-13 14:44:22,701 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2024-11-13 14:44:22,702 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2024-11-13 14:44:22,702 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:44:22,702 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2024-11-13 14:44:22,702 INFO L131 ssoRankerPreferences]: Path of dumped script: [2024-11-13 14:44:22,702 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec13_product22.cil.c_Iteration1_Loop [2024-11-13 14:44:22,702 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2024-11-13 14:44:22,702 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2024-11-13 14:44:22,703 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2024-11-13 14:44:22,778 INFO L259 LassoAnalysis]: Preprocessing complete. [2024-11-13 14:44:22,783 INFO L451 LassoAnalysis]: Using template 'affine'. [2024-11-13 14:44:22,784 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:44:22,784 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:44:22,786 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:44:22,788 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2024-11-13 14:44:22,789 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2024-11-13 14:44:22,804 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2024-11-13 14:44:22,804 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2024-11-13 14:44:22,806 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2024-11-13 14:44:22,806 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2024-11-13 14:44:22,806 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2024-11-13 14:44:22,813 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2024-11-13 14:44:22,814 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2024-11-13 14:44:22,817 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2024-11-13 14:44:22,823 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2024-11-13 14:44:22,825 INFO L444 ModelExtractionUtils]: 1 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2024-11-13 14:44:22,827 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-11-13 14:44:22,827 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 [2024-11-13 14:44:22,834 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-11-13 14:44:22,835 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2024-11-13 14:44:22,836 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2024-11-13 14:44:22,836 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2024-11-13 14:44:22,837 INFO L474 LassoAnalysis]: Proved termination. [2024-11-13 14:44:22,837 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(ULTIMATE.start_existInLiftCallsInDirection_~i~0#1) = -1*ULTIMATE.start_existInLiftCallsInDirection_~i~0#1 Supporting invariants [] [2024-11-13 14:44:22,856 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2024-11-13 14:44:22,858 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2024-11-13 14:44:22,882 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:23,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:23,010 INFO L255 TraceCheckSpWp]: Trace formula consists of 539 conjuncts, 2 conjuncts are in the unsatisfiable core [2024-11-13 14:44:23,012 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-13 14:44:23,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:23,098 WARN L253 TraceCheckSpWp]: Trace formula consists of 11 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-11-13 14:44:23,099 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-13 14:44:23,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:23,342 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 7 loop predicates [2024-11-13 14:44:23,375 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand has 17402 states, 17401 states have (on average 1.8835124418136888) internal successors, (32775), 17401 states have internal predecessors, (32775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:24,811 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6d1ff025-d4db-439e-b102-b32d2b4fa6c9/bin/uautomizer-verify-qhAvR1uOyd/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2024-11-13 14:44:26,014 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand has 17402 states, 17401 states have (on average 1.8835124418136888) internal successors, (32775), 17401 states have internal predecessors, (32775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0). Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 45368 states and 85388 transitions. Complement of second has 18 states. [2024-11-13 14:44:26,016 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 10 states 1 stem states 7 non-accepting loop states 1 accepting loop states [2024-11-13 14:44:26,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 9 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:26,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 59101 transitions. [2024-11-13 14:44:26,086 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 59101 transitions. Stem has 34 letters. Loop has 8 letters. [2024-11-13 14:44:26,088 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 14:44:26,088 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 59101 transitions. Stem has 42 letters. Loop has 8 letters. [2024-11-13 14:44:26,088 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 14:44:26,089 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 10 states and 59101 transitions. Stem has 34 letters. Loop has 16 letters. [2024-11-13 14:44:26,090 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2024-11-13 14:44:26,090 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45368 states and 85388 transitions. [2024-11-13 14:44:26,502 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 7850 [2024-11-13 14:44:26,788 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45368 states to 31309 states and 58845 transitions. [2024-11-13 14:44:26,789 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31279 [2024-11-13 14:44:26,844 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31280 [2024-11-13 14:44:26,844 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31309 states and 58845 transitions. [2024-11-13 14:44:26,847 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:26,848 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31309 states and 58845 transitions. [2024-11-13 14:44:26,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31309 states and 58845 transitions. [2024-11-13 14:44:27,620 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31309 to 31283. [2024-11-13 14:44:27,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31283 states, 31283 states have (on average 1.879806923888374) internal successors, (58806), 31282 states have internal predecessors, (58806), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:27,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31283 states to 31283 states and 58806 transitions. [2024-11-13 14:44:27,804 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31283 states and 58806 transitions. [2024-11-13 14:44:27,804 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:27,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:44:27,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:44:27,811 INFO L87 Difference]: Start difference. First operand 31283 states and 58806 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:29,238 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:29,239 INFO L93 Difference]: Finished difference Result 31265 states and 58675 transitions. [2024-11-13 14:44:29,239 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 31265 states and 58675 transitions. [2024-11-13 14:44:29,413 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 7834 [2024-11-13 14:44:29,567 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 31265 states to 31256 states and 58666 transitions. [2024-11-13 14:44:29,568 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 31237 [2024-11-13 14:44:29,615 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 31237 [2024-11-13 14:44:29,616 INFO L73 IsDeterministic]: Start isDeterministic. Operand 31256 states and 58666 transitions. [2024-11-13 14:44:29,618 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:29,619 INFO L218 hiAutomatonCegarLoop]: Abstraction has 31256 states and 58666 transitions. [2024-11-13 14:44:29,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31256 states and 58666 transitions. [2024-11-13 14:44:29,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31256 to 17389. [2024-11-13 14:44:30,002 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17389 states, 17389 states have (on average 1.8769912013341767) internal successors, (32639), 17388 states have internal predecessors, (32639), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:30,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17389 states to 17389 states and 32639 transitions. [2024-11-13 14:44:30,039 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17389 states and 32639 transitions. [2024-11-13 14:44:30,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-13 14:44:30,040 INFO L424 stractBuchiCegarLoop]: Abstraction has 17389 states and 32639 transitions. [2024-11-13 14:44:30,040 INFO L331 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-11-13 14:44:30,040 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17389 states and 32639 transitions. [2024-11-13 14:44:30,102 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:30,103 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:30,103 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:30,104 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:30,104 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:30,104 INFO L745 eck$LassoCheckResult]: Stem: 134239#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 133891#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 133892#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 142723#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 139570#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 139571#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 140241#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 126535#L2819 assume !(0 == getOrigin_~person#1); 126536#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 130661#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 130662#L2375 assume 0 == initPersonOnFloor_~floor#1; 133351#L2376 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 125845#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 137589#L2167 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 131428#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 139849#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 139850#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 131119#L2819-1 assume !(0 == getOrigin_~person#1); 131120#L2823-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 135657#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 137542#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 137543#L2376-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 125976#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 141775#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 133995#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 132081#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 132082#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 137001#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 137002#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 141463#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 139750#L1647 assume 0 != timeShift_~tmp~14#1; 139751#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 141816#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 141920#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 140315#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 130862#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 130863#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 129108#L1937-2 [2024-11-13 14:44:30,104 INFO L747 eck$LassoCheckResult]: Loop: 129108#L1937-2 assume !false; 129109#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 130765#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 132740#L1946-2 assume !false; 131953#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 131955#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 129108#L1937-2 [2024-11-13 14:44:30,105 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:30,105 INFO L85 PathProgramCache]: Analyzing trace with hash 1440334827, now seen corresponding path program 1 times [2024-11-13 14:44:30,105 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:30,105 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [830733429] [2024-11-13 14:44:30,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:30,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:30,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:30,340 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:30,340 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:30,341 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [830733429] [2024-11-13 14:44:30,341 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [830733429] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:30,341 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:30,341 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:44:30,341 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1740491403] [2024-11-13 14:44:30,341 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:30,341 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:30,341 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:30,342 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 1 times [2024-11-13 14:44:30,342 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:30,342 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [779146868] [2024-11-13 14:44:30,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:30,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:30,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:30,369 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:30,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:30,390 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:30,431 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:30,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:44:30,431 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:44:30,432 INFO L87 Difference]: Start difference. First operand 17389 states and 32639 transitions. cyclomatic complexity: 15284 Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:31,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:31,276 INFO L93 Difference]: Finished difference Result 17407 states and 32657 transitions. [2024-11-13 14:44:31,276 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17407 states and 32657 transitions. [2024-11-13 14:44:31,383 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:31,478 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17407 states to 17407 states and 32657 transitions. [2024-11-13 14:44:31,479 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17388 [2024-11-13 14:44:31,504 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17388 [2024-11-13 14:44:31,505 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17407 states and 32657 transitions. [2024-11-13 14:44:31,506 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:31,506 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17407 states and 32657 transitions. [2024-11-13 14:44:31,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17407 states and 32657 transitions. [2024-11-13 14:44:31,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17407 to 17404. [2024-11-13 14:44:31,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17404 states, 17404 states have (on average 1.876235348195817) internal successors, (32654), 17403 states have internal predecessors, (32654), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:32,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17404 states to 17404 states and 32654 transitions. [2024-11-13 14:44:32,114 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17404 states and 32654 transitions. [2024-11-13 14:44:32,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:44:32,115 INFO L424 stractBuchiCegarLoop]: Abstraction has 17404 states and 32654 transitions. [2024-11-13 14:44:32,115 INFO L331 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-11-13 14:44:32,115 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17404 states and 32654 transitions. [2024-11-13 14:44:32,174 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:32,174 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:32,174 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:32,177 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:32,177 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:32,178 INFO L745 eck$LassoCheckResult]: Stem: 169035#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 168686#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 168687#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 177530#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 174369#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 174370#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 175043#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 161338#L2819 assume !(0 == getOrigin_~person#1); 161339#L2823 assume !(1 == getOrigin_~person#1); 169860#L2827 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 169861#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 177688#L2375 assume 0 == initPersonOnFloor_~floor#1; 177555#L2376 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 160648#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 172387#L2167 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 166227#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 174649#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 174650#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 165918#L2819-1 assume !(0 == getOrigin_~person#1); 165919#L2823-1 assume !(1 == getOrigin_~person#1); 170455#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 172468#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 177693#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 175011#L2376-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 160779#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 176578#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 168790#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 166879#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 166880#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 171800#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 171801#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 176265#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 174550#L1647 assume 0 != timeShift_~tmp~14#1; 174551#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 176619#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 176723#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 175117#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 165662#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 165663#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 163909#L1937-2 [2024-11-13 14:44:32,179 INFO L747 eck$LassoCheckResult]: Loop: 163909#L1937-2 assume !false; 163910#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 165565#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 167537#L1946-2 assume !false; 166751#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 166753#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 163909#L1937-2 [2024-11-13 14:44:32,179 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:32,179 INFO L85 PathProgramCache]: Analyzing trace with hash 920334239, now seen corresponding path program 1 times [2024-11-13 14:44:32,180 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:32,180 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1689522799] [2024-11-13 14:44:32,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:32,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:32,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:32,306 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:32,306 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:32,306 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1689522799] [2024-11-13 14:44:32,307 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1689522799] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:32,307 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:32,307 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-13 14:44:32,307 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [534792354] [2024-11-13 14:44:32,307 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:32,307 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:32,307 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:32,307 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 2 times [2024-11-13 14:44:32,307 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:32,308 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2092418605] [2024-11-13 14:44:32,308 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:32,308 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:32,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:32,327 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:32,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:32,347 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:32,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:32,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:44:32,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:44:32,376 INFO L87 Difference]: Start difference. First operand 17404 states and 32654 transitions. cyclomatic complexity: 15284 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:32,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:32,708 INFO L93 Difference]: Finished difference Result 17370 states and 32586 transitions. [2024-11-13 14:44:32,708 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17370 states and 32586 transitions. [2024-11-13 14:44:32,784 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:32,878 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17370 states to 17370 states and 32586 transitions. [2024-11-13 14:44:32,878 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17351 [2024-11-13 14:44:32,911 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17351 [2024-11-13 14:44:32,911 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17370 states and 32586 transitions. [2024-11-13 14:44:32,912 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:32,912 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17370 states and 32586 transitions. [2024-11-13 14:44:32,946 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17370 states and 32586 transitions. [2024-11-13 14:44:33,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17370 to 17370. [2024-11-13 14:44:33,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17370 states, 17370 states have (on average 1.875993091537133) internal successors, (32586), 17369 states have internal predecessors, (32586), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:33,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17370 states to 17370 states and 32586 transitions. [2024-11-13 14:44:33,413 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17370 states and 32586 transitions. [2024-11-13 14:44:33,413 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:44:33,414 INFO L424 stractBuchiCegarLoop]: Abstraction has 17370 states and 32586 transitions. [2024-11-13 14:44:33,414 INFO L331 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-11-13 14:44:33,414 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17370 states and 32586 transitions. [2024-11-13 14:44:33,474 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:33,475 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:33,475 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:33,475 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:33,475 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:33,476 INFO L745 eck$LassoCheckResult]: Stem: 203809#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 203460#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 203461#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 212281#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 209131#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 209132#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 209802#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 196115#L2819 assume !(0 == getOrigin_~person#1); 196116#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 200234#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 200235#L2375 assume !(0 == initPersonOnFloor_~floor#1); 197054#L2402 assume !(1 == initPersonOnFloor_~floor#1); 197055#L2429 assume !(2 == initPersonOnFloor_~floor#1); 199966#L2456 assume 3 == initPersonOnFloor_~floor#1; 199967#L2457 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_3~0 := 1; 209374#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 207151#L2167 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 201000#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 209410#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 209411#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 200691#L2819-1 assume !(0 == getOrigin_~person#1); 200692#L2823-1 assume !(1 == getOrigin_~person#1); 205224#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 207232#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 212438#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 209771#L2376-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 195556#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 211333#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 203564#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 201653#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 201654#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 206565#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 206566#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 211022#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 209310#L1647 assume 0 != timeShift_~tmp~14#1; 209311#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 211374#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 211477#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 209876#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 200435#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 200436#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 198684#L1937-2 [2024-11-13 14:44:33,477 INFO L747 eck$LassoCheckResult]: Loop: 198684#L1937-2 assume !false; 198685#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 200338#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 202311#L1946-2 assume !false; 201525#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 201527#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 198684#L1937-2 [2024-11-13 14:44:33,478 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:33,478 INFO L85 PathProgramCache]: Analyzing trace with hash -89409198, now seen corresponding path program 1 times [2024-11-13 14:44:33,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:33,478 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [815958856] [2024-11-13 14:44:33,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:33,478 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:33,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:33,691 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:33,692 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:33,692 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [815958856] [2024-11-13 14:44:33,692 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [815958856] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:33,692 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:33,692 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-13 14:44:33,692 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1268627513] [2024-11-13 14:44:33,692 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:33,693 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:33,693 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:33,693 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 3 times [2024-11-13 14:44:33,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:33,693 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [922432065] [2024-11-13 14:44:33,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:33,693 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:33,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:33,712 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:33,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:33,732 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:33,762 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:33,763 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:44:33,763 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:44:33,763 INFO L87 Difference]: Start difference. First operand 17370 states and 32586 transitions. cyclomatic complexity: 15250 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:34,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:34,722 INFO L93 Difference]: Finished difference Result 17378 states and 32593 transitions. [2024-11-13 14:44:34,723 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17378 states and 32593 transitions. [2024-11-13 14:44:34,794 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:34,862 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17378 states to 17378 states and 32593 transitions. [2024-11-13 14:44:34,862 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17359 [2024-11-13 14:44:34,876 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17359 [2024-11-13 14:44:34,876 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17378 states and 32593 transitions. [2024-11-13 14:44:34,878 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:34,878 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17378 states and 32593 transitions. [2024-11-13 14:44:34,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17378 states and 32593 transitions. [2024-11-13 14:44:35,071 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17378 to 17370. [2024-11-13 14:44:35,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17370 states, 17370 states have (on average 1.8756476683937824) internal successors, (32580), 17369 states have internal predecessors, (32580), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:35,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17370 states to 17370 states and 32580 transitions. [2024-11-13 14:44:35,321 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17370 states and 32580 transitions. [2024-11-13 14:44:35,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-13 14:44:35,322 INFO L424 stractBuchiCegarLoop]: Abstraction has 17370 states and 32580 transitions. [2024-11-13 14:44:35,322 INFO L331 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-11-13 14:44:35,322 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17370 states and 32580 transitions. [2024-11-13 14:44:35,403 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:35,403 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:35,403 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:35,405 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:35,405 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:35,406 INFO L745 eck$LassoCheckResult]: Stem: 238564#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 238215#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 238216#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 247035#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 243885#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 243886#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 244556#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 230871#L2819 assume !(0 == getOrigin_~person#1); 230872#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 234990#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 234991#L2375 assume !(0 == initPersonOnFloor_~floor#1); 231810#L2402 assume !(1 == initPersonOnFloor_~floor#1); 231811#L2429 assume !(2 == initPersonOnFloor_~floor#1); 234722#L2456 assume 3 == initPersonOnFloor_~floor#1; 234723#L2457 assume !(0 == initPersonOnFloor_~person#1); 246623#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 244128#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 241906#L2167 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 235756#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 244164#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 244165#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 235447#L2819-1 assume !(0 == getOrigin_~person#1); 235448#L2823-1 assume !(1 == getOrigin_~person#1); 239979#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 241987#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 247192#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 244525#L2376-2 assume !(0 == initPersonOnFloor_~person#1); 244526#L2379-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 230312#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 246087#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 238319#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 236409#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 236410#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 241320#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 241321#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 245776#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 244064#L1647 assume 0 != timeShift_~tmp~14#1; 244065#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 246128#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 246231#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 244630#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 235191#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 235192#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 233440#L1937-2 [2024-11-13 14:44:35,406 INFO L747 eck$LassoCheckResult]: Loop: 233440#L1937-2 assume !false; 233441#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 235094#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 237066#L1946-2 assume !false; 236281#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 236283#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 233440#L1937-2 [2024-11-13 14:44:35,407 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:35,411 INFO L85 PathProgramCache]: Analyzing trace with hash 132035350, now seen corresponding path program 1 times [2024-11-13 14:44:35,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:35,411 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2084510343] [2024-11-13 14:44:35,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:35,411 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:35,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:35,593 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:35,594 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:35,594 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2084510343] [2024-11-13 14:44:35,594 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2084510343] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:35,595 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:35,595 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:44:35,595 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1785892268] [2024-11-13 14:44:35,595 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:35,596 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:35,596 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:35,597 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 4 times [2024-11-13 14:44:35,597 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:35,597 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1728904090] [2024-11-13 14:44:35,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:35,597 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:35,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:35,620 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:35,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:35,646 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:35,681 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:35,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:44:35,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:44:35,682 INFO L87 Difference]: Start difference. First operand 17370 states and 32580 transitions. cyclomatic complexity: 15244 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:36,217 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:36,217 INFO L93 Difference]: Finished difference Result 17374 states and 32583 transitions. [2024-11-13 14:44:36,217 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17374 states and 32583 transitions. [2024-11-13 14:44:36,295 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:36,381 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17374 states to 17374 states and 32583 transitions. [2024-11-13 14:44:36,381 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17355 [2024-11-13 14:44:36,398 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17355 [2024-11-13 14:44:36,399 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17374 states and 32583 transitions. [2024-11-13 14:44:36,404 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:36,404 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17374 states and 32583 transitions. [2024-11-13 14:44:36,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17374 states and 32583 transitions. [2024-11-13 14:44:36,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17374 to 17374. [2024-11-13 14:44:36,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17374 states, 17374 states have (on average 1.8753885115690112) internal successors, (32583), 17373 states have internal predecessors, (32583), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:36,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17374 states to 17374 states and 32583 transitions. [2024-11-13 14:44:36,893 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17374 states and 32583 transitions. [2024-11-13 14:44:36,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:44:36,894 INFO L424 stractBuchiCegarLoop]: Abstraction has 17374 states and 32583 transitions. [2024-11-13 14:44:36,894 INFO L331 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-11-13 14:44:36,894 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17374 states and 32583 transitions. [2024-11-13 14:44:36,954 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:36,954 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:36,954 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:36,956 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:36,957 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:36,957 INFO L745 eck$LassoCheckResult]: Stem: 273317#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 272968#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 272969#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 281788#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 278638#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 278639#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 279309#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 265622#L2819 assume !(0 == getOrigin_~person#1); 265623#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 269742#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 269743#L2375 assume !(0 == initPersonOnFloor_~floor#1); 266561#L2402 assume !(1 == initPersonOnFloor_~floor#1); 266562#L2429 assume !(2 == initPersonOnFloor_~floor#1); 269474#L2456 assume 3 == initPersonOnFloor_~floor#1; 269475#L2457 assume !(0 == initPersonOnFloor_~person#1); 281376#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 278881#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 276659#L2167 assume !(0 == callOnFloor_~floorID#1); 270507#L2170 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 270508#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 278917#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 278918#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 270199#L2819-1 assume !(0 == getOrigin_~person#1); 270200#L2823-1 assume !(1 == getOrigin_~person#1); 274732#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 276740#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 281945#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 279278#L2376-2 assume !(0 == initPersonOnFloor_~person#1); 279279#L2379-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 272297#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 281950#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 273072#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 271163#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 271164#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 276073#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 276074#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 280529#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 278817#L1647 assume 0 != timeShift_~tmp~14#1; 278818#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 280882#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 280984#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 279383#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 269943#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 269944#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 268192#L1937-2 [2024-11-13 14:44:36,958 INFO L747 eck$LassoCheckResult]: Loop: 268192#L1937-2 assume !false; 268193#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 269846#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 271818#L1946-2 assume !false; 271033#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 271035#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 268192#L1937-2 [2024-11-13 14:44:36,958 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:36,958 INFO L85 PathProgramCache]: Analyzing trace with hash -1673489551, now seen corresponding path program 1 times [2024-11-13 14:44:36,958 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:36,959 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [177036920] [2024-11-13 14:44:36,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:36,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:36,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:37,099 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:37,099 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:37,100 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [177036920] [2024-11-13 14:44:37,100 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [177036920] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:37,100 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:37,100 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:44:37,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1714545739] [2024-11-13 14:44:37,100 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:37,100 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:37,101 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:37,101 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 5 times [2024-11-13 14:44:37,101 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:37,101 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [386113196] [2024-11-13 14:44:37,101 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:37,101 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:37,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:37,115 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:37,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:37,131 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:37,157 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:37,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:44:37,158 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:44:37,158 INFO L87 Difference]: Start difference. First operand 17374 states and 32583 transitions. cyclomatic complexity: 15243 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:37,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:37,584 INFO L93 Difference]: Finished difference Result 17380 states and 32588 transitions. [2024-11-13 14:44:37,584 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17380 states and 32588 transitions. [2024-11-13 14:44:37,653 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:37,948 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17380 states to 17380 states and 32588 transitions. [2024-11-13 14:44:37,948 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17361 [2024-11-13 14:44:37,960 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17361 [2024-11-13 14:44:37,960 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17380 states and 32588 transitions. [2024-11-13 14:44:37,969 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:37,969 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17380 states and 32588 transitions. [2024-11-13 14:44:37,990 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17380 states and 32588 transitions. [2024-11-13 14:44:38,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17380 to 17380. [2024-11-13 14:44:38,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17380 states, 17380 states have (on average 1.8750287686996547) internal successors, (32588), 17379 states have internal predecessors, (32588), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:38,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17380 states to 17380 states and 32588 transitions. [2024-11-13 14:44:38,201 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17380 states and 32588 transitions. [2024-11-13 14:44:38,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:44:38,202 INFO L424 stractBuchiCegarLoop]: Abstraction has 17380 states and 32588 transitions. [2024-11-13 14:44:38,203 INFO L331 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-11-13 14:44:38,204 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17380 states and 32588 transitions. [2024-11-13 14:44:38,260 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:38,260 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:38,260 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:38,261 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:38,261 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:38,263 INFO L745 eck$LassoCheckResult]: Stem: 308078#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 307729#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 307730#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 316551#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 313401#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 313402#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 314072#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 300383#L2819 assume !(0 == getOrigin_~person#1); 300384#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 304504#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 304505#L2375 assume !(0 == initPersonOnFloor_~floor#1); 301323#L2402 assume !(1 == initPersonOnFloor_~floor#1); 301324#L2429 assume !(2 == initPersonOnFloor_~floor#1); 304236#L2456 assume 3 == initPersonOnFloor_~floor#1; 304237#L2457 assume !(0 == initPersonOnFloor_~person#1); 316139#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 313644#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 311421#L2167 assume !(0 == callOnFloor_~floorID#1); 305269#L2170 assume !(1 == callOnFloor_~floorID#1); 305270#L2173 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 312350#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 313680#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 313681#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 304961#L2819-1 assume !(0 == getOrigin_~person#1); 304962#L2823-1 assume !(1 == getOrigin_~person#1); 309494#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 311502#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 316708#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 314041#L2376-2 assume !(0 == initPersonOnFloor_~person#1); 314042#L2379-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 307058#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 316716#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 307833#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 305924#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 305925#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 310837#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 310838#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 315292#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 313580#L1647 assume 0 != timeShift_~tmp~14#1; 313581#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 315645#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 315747#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 314146#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 304705#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 304706#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 302954#L1937-2 [2024-11-13 14:44:38,263 INFO L747 eck$LassoCheckResult]: Loop: 302954#L1937-2 assume !false; 302955#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 304608#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 306581#L1946-2 assume !false; 305794#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 305796#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 302954#L1937-2 [2024-11-13 14:44:38,263 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:38,264 INFO L85 PathProgramCache]: Analyzing trace with hash -1655087599, now seen corresponding path program 1 times [2024-11-13 14:44:38,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:38,264 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1409694164] [2024-11-13 14:44:38,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:38,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:38,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:38,378 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:38,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:38,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1409694164] [2024-11-13 14:44:38,382 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1409694164] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:38,382 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:38,383 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:44:38,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [735120146] [2024-11-13 14:44:38,383 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:38,383 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:38,383 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:38,383 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 6 times [2024-11-13 14:44:38,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:38,383 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1652272375] [2024-11-13 14:44:38,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:38,384 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:38,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:38,399 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:38,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:38,411 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:38,434 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:38,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:44:38,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:44:38,435 INFO L87 Difference]: Start difference. First operand 17380 states and 32588 transitions. cyclomatic complexity: 15242 Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:39,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:39,104 INFO L93 Difference]: Finished difference Result 17388 states and 32595 transitions. [2024-11-13 14:44:39,104 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17388 states and 32595 transitions. [2024-11-13 14:44:39,170 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:39,226 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17388 states to 17388 states and 32595 transitions. [2024-11-13 14:44:39,227 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17369 [2024-11-13 14:44:39,239 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17369 [2024-11-13 14:44:39,239 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17388 states and 32595 transitions. [2024-11-13 14:44:39,252 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:39,252 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17388 states and 32595 transitions. [2024-11-13 14:44:39,272 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17388 states and 32595 transitions. [2024-11-13 14:44:39,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17388 to 17388. [2024-11-13 14:44:39,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17388 states, 17388 states have (on average 1.874568668046929) internal successors, (32595), 17387 states have internal predecessors, (32595), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:39,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17388 states to 17388 states and 32595 transitions. [2024-11-13 14:44:39,475 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17388 states and 32595 transitions. [2024-11-13 14:44:39,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:44:39,476 INFO L424 stractBuchiCegarLoop]: Abstraction has 17388 states and 32595 transitions. [2024-11-13 14:44:39,476 INFO L331 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-11-13 14:44:39,476 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17388 states and 32595 transitions. [2024-11-13 14:44:39,519 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:39,519 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:39,519 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:39,519 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:39,519 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:39,519 INFO L745 eck$LassoCheckResult]: Stem: 342854#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 342504#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 342505#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 351328#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 348178#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 348179#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 348849#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 335158#L2819 assume !(0 == getOrigin_~person#1); 335159#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 339279#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 339280#L2375 assume !(0 == initPersonOnFloor_~floor#1); 336098#L2402 assume !(1 == initPersonOnFloor_~floor#1); 336099#L2429 assume !(2 == initPersonOnFloor_~floor#1); 339013#L2456 assume 3 == initPersonOnFloor_~floor#1; 339014#L2457 assume !(0 == initPersonOnFloor_~person#1); 350916#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 348421#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 346198#L2167 assume !(0 == callOnFloor_~floorID#1); 340044#L2170 assume !(1 == callOnFloor_~floorID#1); 340045#L2173 assume !(2 == callOnFloor_~floorID#1); 349121#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 347127#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 348457#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 348458#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 339736#L2819-1 assume !(0 == getOrigin_~person#1); 339737#L2823-1 assume !(1 == getOrigin_~person#1); 344270#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 346279#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 351485#L2375-1 assume 0 == initPersonOnFloor_~floor#1; 348818#L2376-2 assume !(0 == initPersonOnFloor_~person#1); 348819#L2379-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_0~0 := 1; 341833#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 351497#L2167-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 342608#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 340699#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 340700#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 345614#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 345615#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 350069#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 348357#L1647 assume 0 != timeShift_~tmp~14#1; 348358#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 350422#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 350524#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 348923#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 339480#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 339481#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 337728#L1937-2 [2024-11-13 14:44:39,520 INFO L747 eck$LassoCheckResult]: Loop: 337728#L1937-2 assume !false; 337729#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 339383#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 341356#L1946-2 assume !false; 340569#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 340571#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 337728#L1937-2 [2024-11-13 14:44:39,520 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:39,520 INFO L85 PathProgramCache]: Analyzing trace with hash -929528052, now seen corresponding path program 1 times [2024-11-13 14:44:39,520 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:39,520 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [296071759] [2024-11-13 14:44:39,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:39,520 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:39,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:39,670 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:39,670 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:39,670 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [296071759] [2024-11-13 14:44:39,670 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [296071759] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:39,670 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:39,671 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-13 14:44:39,671 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1730819634] [2024-11-13 14:44:39,671 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:39,671 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:39,672 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:39,672 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 7 times [2024-11-13 14:44:39,672 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:39,672 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906498541] [2024-11-13 14:44:39,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:39,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:39,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:39,686 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:39,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:39,694 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:39,723 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:39,723 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:44:39,723 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:44:39,723 INFO L87 Difference]: Start difference. First operand 17388 states and 32595 transitions. cyclomatic complexity: 15241 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:40,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:40,477 INFO L93 Difference]: Finished difference Result 17374 states and 32569 transitions. [2024-11-13 14:44:40,477 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17374 states and 32569 transitions. [2024-11-13 14:44:40,550 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:40,624 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17374 states to 17374 states and 32569 transitions. [2024-11-13 14:44:40,625 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17355 [2024-11-13 14:44:40,640 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17355 [2024-11-13 14:44:40,641 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17374 states and 32569 transitions. [2024-11-13 14:44:40,660 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:40,660 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17374 states and 32569 transitions. [2024-11-13 14:44:40,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17374 states and 32569 transitions. [2024-11-13 14:44:40,920 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17374 to 17374. [2024-11-13 14:44:40,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17374 states, 17374 states have (on average 1.8745827097962473) internal successors, (32569), 17373 states have internal predecessors, (32569), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:40,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17374 states to 17374 states and 32569 transitions. [2024-11-13 14:44:40,992 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17374 states and 32569 transitions. [2024-11-13 14:44:40,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-13 14:44:40,993 INFO L424 stractBuchiCegarLoop]: Abstraction has 17374 states and 32569 transitions. [2024-11-13 14:44:40,993 INFO L331 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-11-13 14:44:40,993 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17374 states and 32569 transitions. [2024-11-13 14:44:41,072 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:41,073 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:41,073 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:41,075 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:41,078 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:41,079 INFO L745 eck$LassoCheckResult]: Stem: 377622#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 377273#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 377274#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 386089#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 382942#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 382943#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 383610#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 369928#L2819 assume !(0 == getOrigin_~person#1); 369929#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 374050#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 374051#L2375 assume !(0 == initPersonOnFloor_~floor#1); 370868#L2402 assume !(1 == initPersonOnFloor_~floor#1); 370869#L2429 assume !(2 == initPersonOnFloor_~floor#1); 373785#L2456 assume 3 == initPersonOnFloor_~floor#1; 373786#L2457 assume !(0 == initPersonOnFloor_~person#1); 385677#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 383186#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 380962#L2167 assume !(0 == callOnFloor_~floorID#1); 374815#L2170 assume !(1 == callOnFloor_~floorID#1); 374816#L2173 assume !(2 == callOnFloor_~floorID#1); 383882#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 381891#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 383221#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 383222#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 374507#L2819-1 assume !(0 == getOrigin_~person#1); 374508#L2823-1 assume !(1 == getOrigin_~person#1); 379036#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 381043#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 380916#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 376784#L2402-1 assume 1 == initPersonOnFloor_~floor#1; 376785#L2403-2 assume !(0 == initPersonOnFloor_~person#1); 377392#L2406-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 370441#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 386255#L2167-2 assume !(0 == callOnFloor_~floorID#1); 386252#L2170-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 377377#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 375470#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 375471#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 380379#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 380380#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 384830#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 383121#L1647 assume 0 != timeShift_~tmp~14#1; 383122#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 385183#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 385285#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 383684#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 374251#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 374252#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 372500#L1937-2 [2024-11-13 14:44:41,079 INFO L747 eck$LassoCheckResult]: Loop: 372500#L1937-2 assume !false; 372501#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 374154#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 376127#L1946-2 assume !false; 375340#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 375342#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 372500#L1937-2 [2024-11-13 14:44:41,079 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:41,079 INFO L85 PathProgramCache]: Analyzing trace with hash 897706594, now seen corresponding path program 1 times [2024-11-13 14:44:41,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:41,079 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [980535207] [2024-11-13 14:44:41,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:41,080 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:41,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:41,267 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:41,267 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:41,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [980535207] [2024-11-13 14:44:41,267 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [980535207] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:41,267 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:41,267 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-13 14:44:41,268 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1158919266] [2024-11-13 14:44:41,268 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:41,268 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:41,268 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:41,269 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 8 times [2024-11-13 14:44:41,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:41,269 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [814571553] [2024-11-13 14:44:41,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:41,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:41,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:41,291 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:41,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:41,301 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:41,326 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:41,326 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-13 14:44:41,326 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-13 14:44:41,327 INFO L87 Difference]: Start difference. First operand 17374 states and 32569 transitions. cyclomatic complexity: 15229 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:41,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:41,918 INFO L93 Difference]: Finished difference Result 17368 states and 32556 transitions. [2024-11-13 14:44:41,918 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17368 states and 32556 transitions. [2024-11-13 14:44:41,965 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:42,003 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17368 states to 17368 states and 32556 transitions. [2024-11-13 14:44:42,003 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17349 [2024-11-13 14:44:42,015 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17349 [2024-11-13 14:44:42,016 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17368 states and 32556 transitions. [2024-11-13 14:44:42,029 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:42,029 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17368 states and 32556 transitions. [2024-11-13 14:44:42,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17368 states and 32556 transitions. [2024-11-13 14:44:42,223 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17368 to 17368. [2024-11-13 14:44:42,242 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17368 states, 17368 states have (on average 1.8744818056195303) internal successors, (32556), 17367 states have internal predecessors, (32556), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:42,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17368 states to 17368 states and 32556 transitions. [2024-11-13 14:44:42,279 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17368 states and 32556 transitions. [2024-11-13 14:44:42,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-13 14:44:42,280 INFO L424 stractBuchiCegarLoop]: Abstraction has 17368 states and 32556 transitions. [2024-11-13 14:44:42,280 INFO L331 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-11-13 14:44:42,280 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17368 states and 32556 transitions. [2024-11-13 14:44:42,337 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:42,337 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:42,337 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:42,338 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:42,338 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:42,338 INFO L745 eck$LassoCheckResult]: Stem: 412366#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 412018#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 412019#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 420832#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 417686#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 417687#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 418354#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 404678#L2819 assume !(0 == getOrigin_~person#1); 404679#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 408795#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 408796#L2375 assume !(0 == initPersonOnFloor_~floor#1); 405615#L2402 assume !(1 == initPersonOnFloor_~floor#1); 405616#L2429 assume !(2 == initPersonOnFloor_~floor#1); 408530#L2456 assume 3 == initPersonOnFloor_~floor#1; 408531#L2457 assume !(0 == initPersonOnFloor_~person#1); 420420#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 417930#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 415707#L2167 assume !(0 == callOnFloor_~floorID#1); 409560#L2170 assume !(1 == callOnFloor_~floorID#1); 409561#L2173 assume !(2 == callOnFloor_~floorID#1); 418626#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 416637#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 417965#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 417966#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 409252#L2819-1 assume !(0 == getOrigin_~person#1); 409253#L2823-1 assume !(1 == getOrigin_~person#1); 413781#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 415788#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 415661#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 411530#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 411531#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 408088#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 408089#L2433-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_2~0 := 1; 404119#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 421000#L2167-2 assume !(0 == callOnFloor_~floorID#1); 420999#L2170-2 assume !(1 == callOnFloor_~floorID#1); 420998#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 412122#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 410215#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 410216#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 415124#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 415125#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 419573#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 417865#L1647 assume 0 != timeShift_~tmp~14#1; 417866#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 419926#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 420028#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 418428#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 408996#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 408997#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 407247#L1937-2 [2024-11-13 14:44:42,339 INFO L747 eck$LassoCheckResult]: Loop: 407247#L1937-2 assume !false; 407248#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 408901#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 410872#L1946-2 assume !false; 410085#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 410087#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 407247#L1937-2 [2024-11-13 14:44:42,339 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:42,339 INFO L85 PathProgramCache]: Analyzing trace with hash 1058059395, now seen corresponding path program 1 times [2024-11-13 14:44:42,339 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:42,339 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [239682290] [2024-11-13 14:44:42,340 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:42,340 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:42,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:42,659 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:42,659 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:42,659 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [239682290] [2024-11-13 14:44:42,659 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [239682290] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:42,659 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:42,659 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-11-13 14:44:42,659 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677992536] [2024-11-13 14:44:42,659 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:42,659 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:42,659 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:42,660 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 9 times [2024-11-13 14:44:42,660 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:42,660 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1877187193] [2024-11-13 14:44:42,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:42,660 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:42,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:42,673 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:42,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:42,681 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:42,703 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:42,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-13 14:44:42,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-13 14:44:42,705 INFO L87 Difference]: Start difference. First operand 17368 states and 32556 transitions. cyclomatic complexity: 15222 Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:43,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:43,241 INFO L93 Difference]: Finished difference Result 17384 states and 32568 transitions. [2024-11-13 14:44:43,241 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17384 states and 32568 transitions. [2024-11-13 14:44:43,313 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:43,352 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17384 states to 17384 states and 32568 transitions. [2024-11-13 14:44:43,353 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17365 [2024-11-13 14:44:43,366 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17365 [2024-11-13 14:44:43,366 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17384 states and 32568 transitions. [2024-11-13 14:44:43,379 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:43,379 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17384 states and 32568 transitions. [2024-11-13 14:44:43,404 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17384 states and 32568 transitions. [2024-11-13 14:44:43,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17384 to 17368. [2024-11-13 14:44:43,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17368 states, 17368 states have (on average 1.8740211883924458) internal successors, (32548), 17367 states have internal predecessors, (32548), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:43,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17368 states to 17368 states and 32548 transitions. [2024-11-13 14:44:43,627 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17368 states and 32548 transitions. [2024-11-13 14:44:43,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-13 14:44:43,628 INFO L424 stractBuchiCegarLoop]: Abstraction has 17368 states and 32548 transitions. [2024-11-13 14:44:43,628 INFO L331 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-11-13 14:44:43,628 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17368 states and 32548 transitions. [2024-11-13 14:44:43,684 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 3964 [2024-11-13 14:44:43,684 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:43,684 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:43,685 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:43,685 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:43,686 INFO L745 eck$LassoCheckResult]: Stem: 447123#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 446775#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 446776#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 455595#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 452446#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 452447#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 453115#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 439437#L2819 assume !(0 == getOrigin_~person#1); 439438#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 443553#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 443554#L2375 assume !(0 == initPersonOnFloor_~floor#1); 440374#L2402 assume !(1 == initPersonOnFloor_~floor#1); 440375#L2429 assume !(2 == initPersonOnFloor_~floor#1); 443288#L2456 assume 3 == initPersonOnFloor_~floor#1; 443289#L2457 assume !(0 == initPersonOnFloor_~person#1); 455182#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 452690#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 450466#L2167 assume !(0 == callOnFloor_~floorID#1); 444318#L2170 assume !(1 == callOnFloor_~floorID#1); 444319#L2173 assume !(2 == callOnFloor_~floorID#1); 453387#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 451396#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 452725#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 452726#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 444010#L2819-1 assume !(0 == getOrigin_~person#1); 444011#L2823-1 assume !(1 == getOrigin_~person#1); 448539#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 450547#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 450420#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 446287#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 446288#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 442846#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 442847#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 450414#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 438878#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 455764#L2167-2 assume !(0 == callOnFloor_~floorID#1); 455763#L2170-2 assume !(1 == callOnFloor_~floorID#1); 455762#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 446879#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 444972#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 444973#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 449882#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 449883#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 454334#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 452625#L1647 assume 0 != timeShift_~tmp~14#1; 452626#L1648 assume ~weight~0 > ~maximumWeight~0;~blocked~0 := 1; 454688#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 454790#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 453189#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 443754#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 443755#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 442005#L1937-2 [2024-11-13 14:44:43,686 INFO L747 eck$LassoCheckResult]: Loop: 442005#L1937-2 assume !false; 442006#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 443659#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 445629#L1946-2 assume !false; 444842#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 444844#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 442005#L1937-2 [2024-11-13 14:44:43,686 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:43,687 INFO L85 PathProgramCache]: Analyzing trace with hash -1946841078, now seen corresponding path program 1 times [2024-11-13 14:44:43,687 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:43,687 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1431555290] [2024-11-13 14:44:43,687 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:43,687 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:43,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:43,900 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:43,900 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:43,900 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1431555290] [2024-11-13 14:44:43,900 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1431555290] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:43,900 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:43,901 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-13 14:44:43,901 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2090373292] [2024-11-13 14:44:43,901 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:43,901 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:43,901 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:43,901 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 10 times [2024-11-13 14:44:43,901 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:43,901 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [343960314] [2024-11-13 14:44:43,902 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:43,902 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:43,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:43,913 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:43,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:43,922 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:43,948 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:43,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:44:43,949 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:44:43,949 INFO L87 Difference]: Start difference. First operand 17368 states and 32548 transitions. cyclomatic complexity: 15214 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 2 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:44,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:44,887 INFO L93 Difference]: Finished difference Result 32858 states and 61690 transitions. [2024-11-13 14:44:44,887 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 32858 states and 61690 transitions. [2024-11-13 14:44:45,010 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 6896 [2024-11-13 14:44:45,083 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 32858 states to 32858 states and 61690 transitions. [2024-11-13 14:44:45,083 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 32820 [2024-11-13 14:44:45,105 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 32820 [2024-11-13 14:44:45,106 INFO L73 IsDeterministic]: Start isDeterministic. Operand 32858 states and 61690 transitions. [2024-11-13 14:44:45,109 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:45,110 INFO L218 hiAutomatonCegarLoop]: Abstraction has 32858 states and 61690 transitions. [2024-11-13 14:44:45,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32858 states and 61690 transitions. [2024-11-13 14:44:45,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32858 to 27846. [2024-11-13 14:44:45,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27846 states, 27846 states have (on average 1.8746678158442864) internal successors, (52202), 27845 states have internal predecessors, (52202), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:45,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27846 states to 27846 states and 52202 transitions. [2024-11-13 14:44:45,740 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27846 states and 52202 transitions. [2024-11-13 14:44:45,741 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:44:45,741 INFO L424 stractBuchiCegarLoop]: Abstraction has 27846 states and 52202 transitions. [2024-11-13 14:44:45,741 INFO L331 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-11-13 14:44:45,741 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27846 states and 52202 transitions. [2024-11-13 14:44:45,806 INFO L131 ngComponentsAnalysis]: Automaton has 66 accepting balls. 6896 [2024-11-13 14:44:45,806 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:45,807 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:45,807 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:45,807 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:45,808 INFO L745 eck$LassoCheckResult]: Stem: 497433#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 497080#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 497081#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 506572#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 502955#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 502956#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 503674#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 489670#L2819 assume !(0 == getOrigin_~person#1); 489671#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 493812#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 493813#L2375 assume !(0 == initPersonOnFloor_~floor#1); 490609#L2402 assume !(1 == initPersonOnFloor_~floor#1); 490610#L2429 assume !(2 == initPersonOnFloor_~floor#1); 493544#L2456 assume 3 == initPersonOnFloor_~floor#1; 493545#L2457 assume !(0 == initPersonOnFloor_~person#1); 506012#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 503214#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 500883#L2167 assume !(0 == callOnFloor_~floorID#1); 494582#L2170 assume !(1 == callOnFloor_~floorID#1); 494583#L2173 assume !(2 == callOnFloor_~floorID#1); 503961#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 501850#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 503249#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 503250#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 494272#L2819-1 assume !(0 == getOrigin_~person#1); 494273#L2823-1 assume !(1 == getOrigin_~person#1); 498877#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 500966#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 500836#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 496584#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 496585#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 493098#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 493099#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 500830#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 489110#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 506837#L2167-2 assume !(0 == callOnFloor_~floorID#1); 506836#L2170-2 assume !(1 == callOnFloor_~floorID#1); 506835#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 497185#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 495245#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 495246#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 500273#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 500274#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 505025#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 503145#L1647 assume !(0 != timeShift_~tmp~14#1);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 499281#L1367-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 495755#getCurrentFloorID_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 495756#L703-2 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 489449#buttonForFloorIsPressed_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 494979#stopRequestedAtCurrentFloor_returnLabel#2 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 494130#L1514-2 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 494131#L1605-3 assume !(1 == ~doorState~0); 496038#L1605-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 499332#L1270-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 492504#isAnyLiftButtonPressed_returnLabel#3 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 498637#L1243-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 493759#L890-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 493760#L1059-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 490504#stopRequestedInDirection__wrappee__weight_returnLabel#9 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 491192#stopRequestedInDirection_returnLabel#3 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 491193#L1613-2 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 498657#L1305-3 assume !(1 == ~currentHeading~0); 498659#L1315-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 490188#L1315-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 503094#L1321-7 havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 491081#L1622-5 havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 509513#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 509486#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 509487#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 511196#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 511194#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 511191#L1937-2 [2024-11-13 14:44:45,808 INFO L747 eck$LassoCheckResult]: Loop: 511191#L1937-2 assume !false; 511190#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 511183#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 511180#L1946-2 assume !false; 511176#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 511177#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 511191#L1937-2 [2024-11-13 14:44:45,809 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:45,809 INFO L85 PathProgramCache]: Analyzing trace with hash 1502347653, now seen corresponding path program 1 times [2024-11-13 14:44:45,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:45,809 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [397713740] [2024-11-13 14:44:45,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:45,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:45,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:46,008 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:46,009 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:46,009 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [397713740] [2024-11-13 14:44:46,009 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [397713740] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:46,009 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:46,009 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-11-13 14:44:46,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [442041029] [2024-11-13 14:44:46,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:46,010 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:46,010 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:46,010 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 11 times [2024-11-13 14:44:46,010 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:46,010 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [103914884] [2024-11-13 14:44:46,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:46,010 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:46,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:46,024 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:46,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:46,033 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:46,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:46,059 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-11-13 14:44:46,059 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2024-11-13 14:44:46,059 INFO L87 Difference]: Start difference. First operand 27846 states and 52202 transitions. cyclomatic complexity: 24424 Second operand has 8 states, 8 states have (on average 8.875) internal successors, (71), 7 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:47,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:47,455 INFO L93 Difference]: Finished difference Result 26933 states and 50096 transitions. [2024-11-13 14:44:47,455 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26933 states and 50096 transitions. [2024-11-13 14:44:47,561 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8204 [2024-11-13 14:44:47,634 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26933 states to 26933 states and 50096 transitions. [2024-11-13 14:44:47,634 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26876 [2024-11-13 14:44:47,652 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26876 [2024-11-13 14:44:47,652 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26933 states and 50096 transitions. [2024-11-13 14:44:47,676 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:47,677 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26933 states and 50096 transitions. [2024-11-13 14:44:47,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26933 states and 50096 transitions. [2024-11-13 14:44:48,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26933 to 26933. [2024-11-13 14:44:48,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26933 states, 26933 states have (on average 1.8600230200868824) internal successors, (50096), 26932 states have internal predecessors, (50096), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:48,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26933 states to 26933 states and 50096 transitions. [2024-11-13 14:44:48,128 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26933 states and 50096 transitions. [2024-11-13 14:44:48,128 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-13 14:44:48,128 INFO L424 stractBuchiCegarLoop]: Abstraction has 26933 states and 50096 transitions. [2024-11-13 14:44:48,129 INFO L331 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-11-13 14:44:48,129 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26933 states and 50096 transitions. [2024-11-13 14:44:48,391 INFO L131 ngComponentsAnalysis]: Automaton has 122 accepting balls. 8204 [2024-11-13 14:44:48,391 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:48,391 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:48,392 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:48,392 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:48,392 INFO L745 eck$LassoCheckResult]: Stem: 551376#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 551044#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 551045#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 559560#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 556395#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 556396#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 557034#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 544385#L2819 assume !(0 == getOrigin_~person#1); 544386#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 548097#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 548098#L2375 assume !(0 == initPersonOnFloor_~floor#1); 545230#L2402 assume !(1 == initPersonOnFloor_~floor#1); 545231#L2429 assume !(2 == initPersonOnFloor_~floor#1); 547850#L2456 assume 3 == initPersonOnFloor_~floor#1; 547851#L2457 assume !(0 == initPersonOnFloor_~person#1); 559098#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 556617#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 554517#L2167 assume !(0 == callOnFloor_~floorID#1); 548786#L2170 assume !(1 == callOnFloor_~floorID#1); 548787#L2173 assume !(2 == callOnFloor_~floorID#1); 557302#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 555376#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 556648#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 556649#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 548504#L2819-1 assume !(0 == getOrigin_~person#1); 548505#L2823-1 assume !(1 == getOrigin_~person#1); 552696#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 554587#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 554473#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 550602#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 550603#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 547448#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 547449#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 554467#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 543878#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 559979#L2167-2 assume !(0 == callOnFloor_~floorID#1); 559978#L2170-2 assume !(1 == callOnFloor_~floorID#1); 559977#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 551144#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 549384#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 549385#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 553970#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 553971#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 558247#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 556554#L1647 assume 0 != timeShift_~tmp~14#1; 556555#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 558097#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 549477#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 549478#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 543859#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 544053#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 544054#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 546703#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 552952#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 552953#L1270 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 553871#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 556490#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 545856#L890-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 545857#L1059-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 546072#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 552386#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 557101#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 557416#L1305 assume !(1 == ~currentHeading~0); 545279#L1315 assume !(0 == ~currentFloorID~0); 545280#L1315-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 553474#L1321-1 havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 548228#L1622-2 havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 559836#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 559827#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 559828#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 559834#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 559961#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 559945#L1937-2 [2024-11-13 14:44:48,392 INFO L747 eck$LassoCheckResult]: Loop: 559945#L1937-2 assume !false; 559944#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 559941#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 559939#L1946-2 assume !false; 559936#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 559937#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 559945#L1937-2 [2024-11-13 14:44:48,393 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:48,393 INFO L85 PathProgramCache]: Analyzing trace with hash -1647903467, now seen corresponding path program 1 times [2024-11-13 14:44:48,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:48,393 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [180535283] [2024-11-13 14:44:48,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:48,393 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:48,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:48,476 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:48,476 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:48,476 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [180535283] [2024-11-13 14:44:48,476 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [180535283] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:48,476 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:48,477 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-13 14:44:48,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [735518467] [2024-11-13 14:44:48,477 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:48,478 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:48,478 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:48,478 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 12 times [2024-11-13 14:44:48,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:48,478 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [570461065] [2024-11-13 14:44:48,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:48,479 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:48,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:48,491 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:48,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:48,499 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:48,527 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:48,528 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:44:48,528 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:44:48,528 INFO L87 Difference]: Start difference. First operand 26933 states and 50096 transitions. cyclomatic complexity: 23288 Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 2 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:49,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:49,679 INFO L93 Difference]: Finished difference Result 41173 states and 76235 transitions. [2024-11-13 14:44:49,679 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41173 states and 76235 transitions. [2024-11-13 14:44:49,799 INFO L131 ngComponentsAnalysis]: Automaton has 178 accepting balls. 12623 [2024-11-13 14:44:49,892 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41173 states to 41173 states and 76235 transitions. [2024-11-13 14:44:49,892 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 41098 [2024-11-13 14:44:49,917 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 41098 [2024-11-13 14:44:49,917 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41173 states and 76235 transitions. [2024-11-13 14:44:49,939 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:49,939 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41173 states and 76235 transitions. [2024-11-13 14:44:49,978 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41173 states and 76235 transitions. [2024-11-13 14:44:50,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41173 to 41172. [2024-11-13 14:44:50,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41172 states, 41172 states have (on average 1.8515981735159817) internal successors, (76234), 41171 states have internal predecessors, (76234), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:50,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41172 states to 41172 states and 76234 transitions. [2024-11-13 14:44:50,791 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41172 states and 76234 transitions. [2024-11-13 14:44:50,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:44:50,792 INFO L424 stractBuchiCegarLoop]: Abstraction has 41172 states and 76234 transitions. [2024-11-13 14:44:50,792 INFO L331 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-11-13 14:44:50,792 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41172 states and 76234 transitions. [2024-11-13 14:44:50,882 INFO L131 ngComponentsAnalysis]: Automaton has 178 accepting balls. 12623 [2024-11-13 14:44:50,882 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:50,882 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:50,883 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:50,883 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:50,883 INFO L745 eck$LassoCheckResult]: Stem: 619533#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 619203#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 619204#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 627972#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 624644#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 624645#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 625293#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 612493#L2819 assume !(0 == getOrigin_~person#1); 612494#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 616226#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 616227#L2375 assume !(0 == initPersonOnFloor_~floor#1); 613344#L2402 assume !(1 == initPersonOnFloor_~floor#1); 613345#L2429 assume !(2 == initPersonOnFloor_~floor#1); 615979#L2456 assume 3 == initPersonOnFloor_~floor#1; 615980#L2457 assume !(0 == initPersonOnFloor_~person#1); 627472#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 624873#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 622740#L2167 assume !(0 == callOnFloor_~floorID#1); 616925#L2170 assume !(1 == callOnFloor_~floorID#1); 616926#L2173 assume !(2 == callOnFloor_~floorID#1); 625571#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 623609#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 624902#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 624903#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 616635#L2819-1 assume !(0 == getOrigin_~person#1); 616636#L2823-1 assume !(1 == getOrigin_~person#1); 620883#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 622814#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 622696#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 618759#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 618760#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 615575#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 615576#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 622690#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 611989#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 628446#L2167-2 assume !(0 == callOnFloor_~floorID#1); 628445#L2170-2 assume !(1 == callOnFloor_~floorID#1); 628444#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 619300#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 617531#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 617532#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 622183#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 622184#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 626568#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 624805#L1647 assume 0 != timeShift_~tmp~14#1; 624806#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 626417#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 617625#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 617626#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 611973#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 612162#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 612163#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 614818#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 621145#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 621146#L1270 assume !(0 != ~floorButtons_0~0); 622084#L1274 assume 0 != ~floorButtons_1~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 623963#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 624741#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 613970#L890-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 613971#L1059-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 614188#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 620571#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 625361#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 625696#L1305 assume !(1 == ~currentHeading~0); 613394#L1315 assume !(0 == ~currentFloorID~0); 613395#L1315-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 621679#L1321-1 havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 616356#L1622-2 havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 628292#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 628283#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 628284#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 628290#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 628381#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 628380#L1937-2 [2024-11-13 14:44:50,883 INFO L747 eck$LassoCheckResult]: Loop: 628380#L1937-2 assume !false; 628379#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 628378#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 628375#L1946-2 assume !false; 628372#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 628373#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 628380#L1937-2 [2024-11-13 14:44:50,884 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:50,884 INFO L85 PathProgramCache]: Analyzing trace with hash 1142994189, now seen corresponding path program 1 times [2024-11-13 14:44:50,884 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:50,884 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1162312909] [2024-11-13 14:44:50,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:50,884 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:50,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:50,956 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:50,957 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:50,957 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1162312909] [2024-11-13 14:44:50,957 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1162312909] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:50,957 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:50,957 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-13 14:44:50,957 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [774168453] [2024-11-13 14:44:50,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:50,957 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:50,958 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:50,958 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 13 times [2024-11-13 14:44:50,958 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:50,958 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [513004841] [2024-11-13 14:44:50,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:50,958 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:50,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:50,970 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:50,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:50,977 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:51,000 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:51,000 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:44:51,000 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:44:51,000 INFO L87 Difference]: Start difference. First operand 41172 states and 76234 transitions. cyclomatic complexity: 35244 Second operand has 3 states, 3 states have (on average 24.333333333333332) internal successors, (73), 2 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:52,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:52,519 INFO L93 Difference]: Finished difference Result 69461 states and 128203 transitions. [2024-11-13 14:44:52,520 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69461 states and 128203 transitions. [2024-11-13 14:44:52,705 INFO L131 ngComponentsAnalysis]: Automaton has 290 accepting balls. 21425 [2024-11-13 14:44:52,850 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69461 states to 69461 states and 128203 transitions. [2024-11-13 14:44:52,850 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69352 [2024-11-13 14:44:52,890 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69352 [2024-11-13 14:44:52,890 INFO L73 IsDeterministic]: Start isDeterministic. Operand 69461 states and 128203 transitions. [2024-11-13 14:44:52,891 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:52,891 INFO L218 hiAutomatonCegarLoop]: Abstraction has 69461 states and 128203 transitions. [2024-11-13 14:44:52,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69461 states and 128203 transitions. [2024-11-13 14:44:53,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69461 to 69459. [2024-11-13 14:44:54,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69459 states, 69459 states have (on average 1.845707539699679) internal successors, (128201), 69458 states have internal predecessors, (128201), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:54,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69459 states to 69459 states and 128201 transitions. [2024-11-13 14:44:54,198 INFO L240 hiAutomatonCegarLoop]: Abstraction has 69459 states and 128201 transitions. [2024-11-13 14:44:54,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:44:54,199 INFO L424 stractBuchiCegarLoop]: Abstraction has 69459 states and 128201 transitions. [2024-11-13 14:44:54,199 INFO L331 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-11-13 14:44:54,199 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 69459 states and 128201 transitions. [2024-11-13 14:44:54,436 INFO L131 ngComponentsAnalysis]: Automaton has 290 accepting balls. 21425 [2024-11-13 14:44:54,436 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:44:54,436 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:44:54,437 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:44:54,437 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:44:54,437 INFO L745 eck$LassoCheckResult]: Stem: 730154#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 729827#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 729828#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 738656#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 735289#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 735290#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 735947#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 723133#L2819 assume !(0 == getOrigin_~person#1); 723134#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 726860#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 726861#L2375 assume !(0 == initPersonOnFloor_~floor#1); 723978#L2402 assume !(1 == initPersonOnFloor_~floor#1); 723979#L2429 assume !(2 == initPersonOnFloor_~floor#1); 726613#L2456 assume 3 == initPersonOnFloor_~floor#1; 726614#L2457 assume !(0 == initPersonOnFloor_~person#1); 738109#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 735515#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 733368#L2167 assume !(0 == callOnFloor_~floorID#1); 727557#L2170 assume !(1 == callOnFloor_~floorID#1); 727558#L2173 assume !(2 == callOnFloor_~floorID#1); 736230#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 734262#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 735549#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 735550#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 727272#L2819-1 assume !(0 == getOrigin_~person#1); 727273#L2823-1 assume !(1 == getOrigin_~person#1); 731500#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 733443#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 733321#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 729378#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 729379#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 726207#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 726208#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 733315#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 722627#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 739137#L2167-2 assume !(0 == callOnFloor_~floorID#1); 739136#L2170-2 assume !(1 == callOnFloor_~floorID#1); 739135#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 729925#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 728155#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 728156#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 732802#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 732803#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 737210#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 735450#L1647 assume 0 != timeShift_~tmp~14#1; 735451#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 737051#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 728250#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 728251#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 722613#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 722799#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 722800#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 725455#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 731762#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 731763#L1270 assume !(0 != ~floorButtons_0~0); 732703#L1274 assume !(0 != ~floorButtons_1~0); 736778#L1278 assume 0 != ~floorButtons_2~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 734598#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 735387#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 724608#L890-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 724609#L1059-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 724825#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 731186#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 736015#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 736352#L1305 assume !(1 == ~currentHeading~0); 724029#L1315 assume !(0 == ~currentFloorID~0); 724030#L1315-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 732301#L1321-1 havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 726992#L1622-2 havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 738986#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 738977#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 738978#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 738984#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 739099#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 739100#L1937-2 [2024-11-13 14:44:54,438 INFO L747 eck$LassoCheckResult]: Loop: 739100#L1937-2 assume !false; 739095#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 739096#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 739118#L1946-2 assume !false; 739113#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 739114#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 739100#L1937-2 [2024-11-13 14:44:54,438 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:54,438 INFO L85 PathProgramCache]: Analyzing trace with hash 1071081136, now seen corresponding path program 1 times [2024-11-13 14:44:54,438 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:54,438 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [214652239] [2024-11-13 14:44:54,438 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:54,438 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:54,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:44:54,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:44:54,527 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:44:54,527 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [214652239] [2024-11-13 14:44:54,527 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [214652239] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:44:54,527 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:44:54,527 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-13 14:44:54,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [329690048] [2024-11-13 14:44:54,527 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:44:54,528 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:44:54,528 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:44:54,528 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 14 times [2024-11-13 14:44:54,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:44:54,528 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1211411485] [2024-11-13 14:44:54,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:44:54,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:44:54,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:54,547 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:44:54,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:44:54,557 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:44:54,582 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:44:54,583 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:44:54,583 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:44:54,583 INFO L87 Difference]: Start difference. First operand 69459 states and 128201 transitions. cyclomatic complexity: 59038 Second operand has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 2 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:56,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:44:56,382 INFO L93 Difference]: Finished difference Result 125625 states and 231255 transitions. [2024-11-13 14:44:56,382 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 125625 states and 231255 transitions. [2024-11-13 14:44:57,285 INFO L131 ngComponentsAnalysis]: Automaton has 514 accepting balls. 38937 [2024-11-13 14:44:57,577 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 125625 states to 125625 states and 231255 transitions. [2024-11-13 14:44:57,577 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 125450 [2024-11-13 14:44:57,657 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 125450 [2024-11-13 14:44:57,657 INFO L73 IsDeterministic]: Start isDeterministic. Operand 125625 states and 231255 transitions. [2024-11-13 14:44:57,658 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2024-11-13 14:44:57,658 INFO L218 hiAutomatonCegarLoop]: Abstraction has 125625 states and 231255 transitions. [2024-11-13 14:44:57,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125625 states and 231255 transitions. [2024-11-13 14:44:58,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125625 to 125621. [2024-11-13 14:44:59,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125621 states, 125621 states have (on average 1.8408625946298787) internal successors, (231251), 125620 states have internal predecessors, (231251), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:44:59,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125621 states to 125621 states and 231251 transitions. [2024-11-13 14:44:59,244 INFO L240 hiAutomatonCegarLoop]: Abstraction has 125621 states and 231251 transitions. [2024-11-13 14:44:59,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-13 14:44:59,245 INFO L424 stractBuchiCegarLoop]: Abstraction has 125621 states and 231251 transitions. [2024-11-13 14:44:59,245 INFO L331 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-11-13 14:44:59,245 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 125621 states and 231251 transitions. [2024-11-13 14:45:00,079 INFO L131 ngComponentsAnalysis]: Automaton has 514 accepting balls. 38937 [2024-11-13 14:45:00,079 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-11-13 14:45:00,079 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-11-13 14:45:00,080 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-13 14:45:00,080 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1] [2024-11-13 14:45:00,081 INFO L745 eck$LassoCheckResult]: Stem: 925261#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(32, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);call #Ultimate.allocInit(9, 37);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~blocked~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~prevDir~0 := 0; 924927#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret128#1, main_~retValue_acc~27#1, main_~tmp~27#1;havoc main_~retValue_acc~27#1;havoc main_~tmp~27#1;assume { :begin_inline_select_helpers } true; 924928#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 933723#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 930360#valid_product_returnLabel#1 main_#t~ret128#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;assume { :end_inline_valid_product } true;main_~tmp~27#1 := main_#t~ret128#1;havoc main_#t~ret128#1; 930361#L3266 assume 0 != main_~tmp~27#1;assume { :begin_inline_setup } true; 931017#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_aliceCall } true;havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;havoc aliceCall_~tmp~20#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 1;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 918220#L2819 assume !(0 == getOrigin_~person#1); 918221#L2823 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 921940#getOrigin_returnLabel#1 aliceCall_#t~ret117#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;aliceCall_~tmp~20#1 := aliceCall_#t~ret117#1;havoc aliceCall_#t~ret117#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 1, aliceCall_~tmp~20#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 921941#L2375 assume !(0 == initPersonOnFloor_~floor#1); 919060#L2402 assume !(1 == initPersonOnFloor_~floor#1); 919061#L2429 assume !(2 == initPersonOnFloor_~floor#1); 921688#L2456 assume 3 == initPersonOnFloor_~floor#1; 921689#L2457 assume !(0 == initPersonOnFloor_~person#1); 933210#L2460 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_3~0 := 1; 930592#L2483-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 928454#L2167 assume !(0 == callOnFloor_~floorID#1); 922641#L2170 assume !(1 == callOnFloor_~floorID#1); 922642#L2173 assume !(2 == callOnFloor_~floorID#1); 931305#L2176 assume 3 == callOnFloor_~floorID#1;~calls_3~0 := 1; 929341#L2179-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 930622#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 930623#aliceCall_returnLabel#1 havoc aliceCall_#t~ret117#1, aliceCall_~tmp~20#1;assume { :end_inline_aliceCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;havoc angelinaCall_~tmp~21#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 922354#L2819-1 assume !(0 == getOrigin_~person#1); 922355#L2823-1 assume !(1 == getOrigin_~person#1); 926589#L2827-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 928530#getOrigin_returnLabel#2 angelinaCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~21#1 := angelinaCall_#t~ret118#1;havoc angelinaCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~21#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 928410#L2375-1 assume !(0 == initPersonOnFloor_~floor#1); 924472#L2402-1 assume !(1 == initPersonOnFloor_~floor#1); 924473#L2429-1 assume 2 == initPersonOnFloor_~floor#1; 921285#L2430-2 assume !(0 == initPersonOnFloor_~person#1); 921286#L2433-2 assume !(1 == initPersonOnFloor_~person#1); 928402#L2436-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 917716#L2483-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 934172#L2167-2 assume !(0 == callOnFloor_~floorID#1); 934171#L2170-2 assume !(1 == callOnFloor_~floorID#1); 934170#L2173-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 925027#L2179-5 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 923243#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 923244#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret118#1, angelinaCall_~tmp~21#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_~tmp~14#1;havoc timeShift_~tmp~14#1;assume { :begin_inline___utac_acc__Specification13_spec__1 } true;havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;havoc getCurrentHeading_~retValue_acc~7#1;getCurrentHeading_~retValue_acc~7#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~7#1; 927888#getCurrentHeading_returnLabel#1 __utac_acc__Specification13_spec__1_#t~ret129#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~7#1;assume { :end_inline_getCurrentHeading } true;~prevDir~0 := __utac_acc__Specification13_spec__1_#t~ret129#1;havoc __utac_acc__Specification13_spec__1_#t~ret129#1; 927889#__utac_acc__Specification13_spec__1_returnLabel#1 havoc __utac_acc__Specification13_spec__1_#t~ret129#1;assume { :end_inline___utac_acc__Specification13_spec__1 } true;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;havoc areDoorsOpen_~retValue_acc~5#1;areDoorsOpen_~retValue_acc~5#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~5#1; 932300#areDoorsOpen_returnLabel#1 timeShift_#t~ret79#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~5#1;assume { :end_inline_areDoorsOpen } true;timeShift_~tmp~14#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 930529#L1647 assume 0 != timeShift_~tmp~14#1; 930530#L1648 assume !(~weight~0 > ~maximumWeight~0);~blocked~0 := 0;assume { :begin_inline_timeShift__wrappee__twothirdsfull } true;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp~13#1;havoc timeShift__wrappee__twothirdsfull_~tmp___0~5#1;havoc timeShift__wrappee__twothirdsfull_~tmp___1~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___2~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___3~3#1;havoc timeShift__wrappee__twothirdsfull_~tmp___4~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___5~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___6~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___7~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___8~2#1;havoc timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~15#1;havoc stopRequestedAtCurrentFloor_~tmp~11#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~2#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~2#1 / 3); 932136#L1367 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;havoc getCurrentFloorID_~retValue_acc~4#1;getCurrentFloorID_~retValue_acc~4#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~4#1; 923341#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret53#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~4#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~11#1 := stopRequestedAtCurrentFloor_#t~ret53#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~11#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~6#1; 923342#L703 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~6#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~6#1; 917697#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret54#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~6#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret54#1;havoc stopRequestedAtCurrentFloor_#t~ret54#1;stopRequestedAtCurrentFloor_~retValue_acc~15#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~3#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~15#1; 917886#stopRequestedAtCurrentFloor_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret68#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret53#1, stopRequestedAtCurrentFloor_#t~ret54#1, stopRequestedAtCurrentFloor_#t~ret55#1, stopRequestedAtCurrentFloor_~retValue_acc~15#1, stopRequestedAtCurrentFloor_~tmp~11#1, stopRequestedAtCurrentFloor_~tmp___0~3#1, stopRequestedAtCurrentFloor_~__cil_tmp4~2#1, stopRequestedAtCurrentFloor_~__cil_tmp5~4#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift__wrappee__twothirdsfull_~tmp___9~2#1 := timeShift__wrappee__twothirdsfull_#t~ret68#1;havoc timeShift__wrappee__twothirdsfull_#t~ret68#1; 917887#L1514 assume !(0 != timeShift__wrappee__twothirdsfull_~tmp___9~2#1); 920541#L1605 assume 1 == ~doorState~0;~doorState~0 := 0; 926851#L1605-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~12#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~8#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_~__cil_tmp9~5#1;stopRequestedInDirection_~__cil_tmp8~5#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5#1 / 3 else stopRequestedInDirection_~__cil_tmp8~5#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1; 926852#L1270 assume !(0 != ~floorButtons_0~0); 927791#L1274 assume !(0 != ~floorButtons_1~0); 931866#L1278 assume !(0 != ~floorButtons_2~0); 931867#L1282 assume 0 != ~floorButtons_3~0;isAnyLiftButtonPressed_~retValue_acc~13#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~13#1; 929686#isAnyLiftButtonPressed_returnLabel#1 stopRequestedInDirection_#t~ret46#1 := isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~13#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~8#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~8#1; 930463#L1243 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~7#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 919685#L890-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 919686#L1059-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1; 920450#stopRequestedInDirection__wrappee__weight_returnLabel#3 stopRequestedInDirection_#t~ret49#1 := stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_#t~ret43#1, stopRequestedInDirection__wrappee__weight_#t~ret44#1, stopRequestedInDirection__wrappee__weight_#t~ret45#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~11#1, stopRequestedInDirection__wrappee__weight_~tmp~7#1, stopRequestedInDirection__wrappee__weight_~tmp___0~1#1, stopRequestedInDirection__wrappee__weight_~tmp___1~1#1, stopRequestedInDirection__wrappee__weight_~tmp___2~1#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;havoc stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~12#1 := stopRequestedInDirection_#t~ret49#1;havoc stopRequestedInDirection_#t~ret49#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~12#1; 926278#stopRequestedInDirection_returnLabel#1 timeShift__wrappee__twothirdsfull_#t~ret75#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_#t~ret47#1, stopRequestedInDirection_#t~ret48#1, stopRequestedInDirection_#t~ret49#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~12#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~8#1, stopRequestedInDirection_~__cil_tmp8~5#1, stopRequestedInDirection_~__cil_tmp9~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift__wrappee__twothirdsfull_~tmp___8~2#1 := timeShift__wrappee__twothirdsfull_#t~ret75#1;havoc timeShift__wrappee__twothirdsfull_#t~ret75#1; 931090#L1613 assume 0 != timeShift__wrappee__twothirdsfull_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~9#1;~currentHeading~0 := continueInDirection_~dir#1; 931427#L1305 assume !(1 == ~currentHeading~0); 919110#L1315 assume !(0 == ~currentFloorID~0); 919111#L1315-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 927383#L1321-1 havoc continueInDirection_#t~ret50#1, continueInDirection_~dir#1, continueInDirection_~tmp~9#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 922077#L1622-2 havoc timeShift__wrappee__twothirdsfull_#t~ret68#1, timeShift__wrappee__twothirdsfull_#t~ret69#1, timeShift__wrappee__twothirdsfull_#t~ret70#1, timeShift__wrappee__twothirdsfull_#t~ret71#1, timeShift__wrappee__twothirdsfull_#t~ret72#1, timeShift__wrappee__twothirdsfull_#t~ret73#1, timeShift__wrappee__twothirdsfull_#t~ret74#1, timeShift__wrappee__twothirdsfull_#t~ret75#1, timeShift__wrappee__twothirdsfull_#t~ret76#1, timeShift__wrappee__twothirdsfull_#t~ret77#1, timeShift__wrappee__twothirdsfull_#t~ret78#1, timeShift__wrappee__twothirdsfull_~tmp~13#1, timeShift__wrappee__twothirdsfull_~tmp___0~5#1, timeShift__wrappee__twothirdsfull_~tmp___1~3#1, timeShift__wrappee__twothirdsfull_~tmp___2~3#1, timeShift__wrappee__twothirdsfull_~tmp___3~3#1, timeShift__wrappee__twothirdsfull_~tmp___4~2#1, timeShift__wrappee__twothirdsfull_~tmp___5~2#1, timeShift__wrappee__twothirdsfull_~tmp___6~2#1, timeShift__wrappee__twothirdsfull_~tmp___7~2#1, timeShift__wrappee__twothirdsfull_~tmp___8~2#1, timeShift__wrappee__twothirdsfull_~tmp___9~2#1;assume { :end_inline_timeShift__wrappee__twothirdsfull } true; 934024#L1647-1 assume { :begin_inline___utac_acc__Specification13_spec__2 } true;havoc __utac_acc__Specification13_spec__2_#t~ret130#1, __utac_acc__Specification13_spec__2_#t~ret131#1, __utac_acc__Specification13_spec__2_#t~ret132#1, __utac_acc__Specification13_spec__2_#t~ret133#1, __utac_acc__Specification13_spec__2_#t~ret134#1, __utac_acc__Specification13_spec__2_#t~ret135#1, __utac_acc__Specification13_spec__2_~tmp~28#1, __utac_acc__Specification13_spec__2_~tmp___0~11#1, __utac_acc__Specification13_spec__2_~tmp___1~8#1, __utac_acc__Specification13_spec__2_~tmp___2~6#1, __utac_acc__Specification13_spec__2_~tmp___3~5#1, __utac_acc__Specification13_spec__2_~tmp___4~3#1, __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1, __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;havoc __utac_acc__Specification13_spec__2_~tmp~28#1;havoc __utac_acc__Specification13_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification13_spec__2_~tmp___1~8#1;havoc __utac_acc__Specification13_spec__2_~tmp___2~6#1;havoc __utac_acc__Specification13_spec__2_~tmp___3~5#1;havoc __utac_acc__Specification13_spec__2_~tmp___4~3#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1;havoc __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1;__utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 := 2 * ~maximumWeight~0;__utac_acc__Specification13_spec__2_~__cil_tmp8~7#1 := (if __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 < 0 && 0 != __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 % 3 then 1 + __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3 else __utac_acc__Specification13_spec__2_~__cil_tmp7~6#1 / 3); 934015#L3305 assume ~weight~0 > __utac_acc__Specification13_spec__2_~__cil_tmp8~7#1; 934016#L3306 assume 1 == ~prevDir~0;assume { :begin_inline_existInLiftCallsInDirection } true;existInLiftCallsInDirection_#in~d#1 := 0;havoc existInLiftCallsInDirection_#res#1;havoc existInLiftCallsInDirection_~d#1, existInLiftCallsInDirection_~retValue_acc~17#1, existInLiftCallsInDirection_~i~0#1, existInLiftCallsInDirection_~i___0~0#1;existInLiftCallsInDirection_~d#1 := existInLiftCallsInDirection_#in~d#1;havoc existInLiftCallsInDirection_~retValue_acc~17#1;havoc existInLiftCallsInDirection_~i~0#1;havoc existInLiftCallsInDirection_~i___0~0#1; 934022#L1867 assume !(1 == existInLiftCallsInDirection_~d#1); 934118#L1933 assume 0 == existInLiftCallsInDirection_~d#1;existInLiftCallsInDirection_~i___0~0#1 := 0;existInLiftCallsInDirection_~i___0~0#1 := ~currentFloorID~0 - 1; 934119#L1937-2 [2024-11-13 14:45:00,081 INFO L747 eck$LassoCheckResult]: Loop: 934119#L1937-2 assume !false; 934114#L1938 assume existInLiftCallsInDirection_~i___0~0#1 >= 0; 934115#L1939 existInLiftCallsInDirection_~i___0~0#1 := 1 + ~currentFloorID~0; 934152#L1946-2 assume !false; 934150#L1947 assume !(existInLiftCallsInDirection_~i___0~0#1 < 5); 934142#L2005 existInLiftCallsInDirection_~i___0~0#1 := existInLiftCallsInDirection_~i___0~0#1 - 1; 934119#L1937-2 [2024-11-13 14:45:00,081 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:45:00,081 INFO L85 PathProgramCache]: Analyzing trace with hash -1848617976, now seen corresponding path program 1 times [2024-11-13 14:45:00,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:45:00,081 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1744375059] [2024-11-13 14:45:00,082 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:45:00,082 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:45:00,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-13 14:45:00,179 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-13 14:45:00,179 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-11-13 14:45:00,179 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1744375059] [2024-11-13 14:45:00,179 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1744375059] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-13 14:45:00,179 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-13 14:45:00,180 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-13 14:45:00,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1754274979] [2024-11-13 14:45:00,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-13 14:45:00,180 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-11-13 14:45:00,180 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-13 14:45:00,180 INFO L85 PathProgramCache]: Analyzing trace with hash 704608906, now seen corresponding path program 15 times [2024-11-13 14:45:00,180 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-11-13 14:45:00,181 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1792101660] [2024-11-13 14:45:00,181 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-13 14:45:00,181 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-13 14:45:00,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:45:00,199 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-11-13 14:45:00,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-11-13 14:45:00,209 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-11-13 14:45:00,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-11-13 14:45:00,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-13 14:45:00,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-13 14:45:00,236 INFO L87 Difference]: Start difference. First operand 125621 states and 231251 transitions. cyclomatic complexity: 106154 Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 2 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-13 14:45:02,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-13 14:45:02,900 INFO L93 Difference]: Finished difference Result 237099 states and 435325 transitions. [2024-11-13 14:45:02,900 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 237099 states and 435325 transitions.